Action not permitted
Modal body text goes here.
cve-2014-0432
Vulnerability from cvelistv5
Published
2014-04-15 22:00
Modified
2024-08-06 09:13
Severity ?
EPSS score ?
Summary
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0455 and CVE-2014-2402.
References
▼ | URL | Tags | |
---|---|---|---|
secalert_us@oracle.com | http://marc.info/?l=bugtraq&m=140852886808946&w=2 | Issue Tracking, Mailing List, Third Party Advisory | |
secalert_us@oracle.com | http://security.gentoo.org/glsa/glsa-201502-12.xml | Third Party Advisory | |
secalert_us@oracle.com | http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html | Vendor Advisory | |
secalert_us@oracle.com | http://www.securityfocus.com/bid/66897 | Third Party Advisory, VDB Entry | |
secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2014:0413 | Third Party Advisory |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-06T09:13:10.617Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "HPSBUX03091", "tags": [ "vendor-advisory", "x_refsource_HP", "x_transferred" ], "url": "http://marc.info/?l=bugtraq\u0026m=140852886808946\u0026w=2" }, { "name": "RHSA-2014:0413", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2014:0413" }, { "name": "SSRT101667", "tags": [ "vendor-advisory", "x_refsource_HP", "x_transferred" ], "url": "http://marc.info/?l=bugtraq\u0026m=140852886808946\u0026w=2" }, { "name": "66897", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/66897" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html" }, { "name": "GLSA-201502-12", "tags": [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred" ], "url": "http://security.gentoo.org/glsa/glsa-201502-12.xml" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2014-04-15T00:00:00", "descriptions": [ { "lang": "en", "value": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0455 and CVE-2014-2402." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2018-01-04T19:57:01", "orgId": "43595867-4340-4103-b7a2-9a5208d29a85", "shortName": "oracle" }, "references": [ { "name": "HPSBUX03091", "tags": [ "vendor-advisory", "x_refsource_HP" ], "url": "http://marc.info/?l=bugtraq\u0026m=140852886808946\u0026w=2" }, { "name": "RHSA-2014:0413", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2014:0413" }, { "name": "SSRT101667", "tags": [ "vendor-advisory", "x_refsource_HP" ], "url": "http://marc.info/?l=bugtraq\u0026m=140852886808946\u0026w=2" }, { "name": "66897", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/66897" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html" }, { "name": "GLSA-201502-12", "tags": [ "vendor-advisory", "x_refsource_GENTOO" ], "url": "http://security.gentoo.org/glsa/glsa-201502-12.xml" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "secalert_us@oracle.com", "ID": "CVE-2014-0432", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0455 and CVE-2014-2402." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "HPSBUX03091", "refsource": "HP", "url": "http://marc.info/?l=bugtraq\u0026m=140852886808946\u0026w=2" }, { "name": "RHSA-2014:0413", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2014:0413" }, { "name": "SSRT101667", "refsource": "HP", "url": "http://marc.info/?l=bugtraq\u0026m=140852886808946\u0026w=2" }, { "name": "66897", "refsource": "BID", "url": "http://www.securityfocus.com/bid/66897" }, { "name": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html" }, { "name": "GLSA-201502-12", "refsource": "GENTOO", "url": "http://security.gentoo.org/glsa/glsa-201502-12.xml" } ] } } } }, "cveMetadata": { "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85", "assignerShortName": "oracle", "cveId": "CVE-2014-0432", "datePublished": "2014-04-15T22:00:00", "dateReserved": "2013-12-12T00:00:00", "dateUpdated": "2024-08-06T09:13:10.617Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2014-0432\",\"sourceIdentifier\":\"secalert_us@oracle.com\",\"published\":\"2014-04-16T00:55:23.967\",\"lastModified\":\"2022-05-13T14:57:17.080\",\"vulnStatus\":\"Analyzed\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0455 and CVE-2014-2402.\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad no especificada en Oracle Java SE 7u51 y 8, y Java SE Embedded 7u51, que permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a trav\u00e9s de vectores desconocidos relacionados con las librer\u00edas, una vulnerabilidad diferente a CVE-2014-0455 y CVE-2014-2402.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:C/I:C/A:C\",\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\",\"baseScore\":9.3},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":8.6,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.7.0:update51:*:*:*:*:*:*\",\"matchCriteriaId\":\"3343969B-2926-4C55-8787-792ABF6429D7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.8.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"F906BFD6-7654-46C5-8240-3A50949CAE85\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.7.0:update51:*:*:*:*:*:*\",\"matchCriteriaId\":\"4DA64EFB-8416-4A0B-91B5-F02CC1A79D40\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.8.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA226495-4733-485A-9D53-85874434815D\"}]}]}],\"references\":[{\"url\":\"http://marc.info/?l=bugtraq\u0026m=140852886808946\u0026w=2\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Issue Tracking\",\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-201502-12.xml\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/66897\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2014:0413\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]}]}}" } }
ghsa-gj43-gc6c-4xvw
Vulnerability from github
Published
2022-05-10 00:01
Modified
2022-05-10 00:01
Details
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0455 and CVE-2014-2402.
{ "affected": [], "aliases": [ "CVE-2014-0432" ], "database_specific": { "cwe_ids": [], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2014-04-16T00:55:00Z", "severity": "HIGH" }, "details": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0455 and CVE-2014-2402.", "id": "GHSA-gj43-gc6c-4xvw", "modified": "2022-05-10T00:01:09Z", "published": "2022-05-10T00:01:09Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0432" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2014:0413" }, { "type": "WEB", "url": "http://marc.info/?l=bugtraq\u0026m=140852886808946\u0026w=2" }, { "type": "WEB", "url": "http://security.gentoo.org/glsa/glsa-201502-12.xml" }, { "type": "WEB", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/66897" } ], "schema_version": "1.4.0", "severity": [] }
rhsa-2014_0413
Vulnerability from csaf_redhat
Published
2014-04-17 09:28
Modified
2024-11-14 14:27
Summary
Red Hat Security Advisory: java-1.7.0-oracle security update
Notes
Topic
Updated java-1.7.0-oracle packages that fix several security issues are now
available for Oracle Java for Red Hat Enterprise Linux 5 and 6.
The Red Hat Security Response Team has rated this update as having Critical
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.
[Updated 12th May 2014]
The package list in this erratum has been updated to make the packages
available in the Oracle Java for Red Hat Enterprise Linux 6 Workstation
x86_64 channels on the Red Hat Network.
Details
Oracle Java SE version 7 includes the Oracle Java Runtime Environment and
the Oracle Java Software Development Kit.
This update fixes several vulnerabilities in the Oracle Java Runtime
Environment and the Oracle Java Software Development Kit. Further
information about these flaws can be found on the Oracle Java SE Critical
Patch Update Advisory page, listed in the References section.
(CVE-2013-6629, CVE-2013-6954, CVE-2014-0429, CVE-2014-0432, CVE-2014-0446,
CVE-2014-0448, CVE-2014-0449, CVE-2014-0451, CVE-2014-0452, CVE-2014-0453,
CVE-2014-0454, CVE-2014-0455, CVE-2014-0456, CVE-2014-0457, CVE-2014-0458,
CVE-2014-0459, CVE-2014-0460, CVE-2014-0461, CVE-2014-1876, CVE-2014-2397,
CVE-2014-2398, CVE-2014-2401, CVE-2014-2402, CVE-2014-2403, CVE-2014-2409,
CVE-2014-2412, CVE-2014-2413, CVE-2014-2414, CVE-2014-2420, CVE-2014-2421,
CVE-2014-2422, CVE-2014-2423, CVE-2014-2427, CVE-2014-2428)
All users of java-1.7.0-oracle are advised to upgrade to these updated
packages, which provide Oracle Java 7 Update 55 and resolve these issues.
All running instances of Oracle Java must be restarted for the update to
take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated java-1.7.0-oracle packages that fix several security issues are now\navailable for Oracle Java for Red Hat Enterprise Linux 5 and 6.\n\nThe Red Hat Security Response Team has rated this update as having Critical\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.\n\n[Updated 12th May 2014]\nThe package list in this erratum has been updated to make the packages\navailable in the Oracle Java for Red Hat Enterprise Linux 6 Workstation\nx86_64 channels on the Red Hat Network.", "title": "Topic" }, { "category": "general", "text": "Oracle Java SE version 7 includes the Oracle Java Runtime Environment and\nthe Oracle Java Software Development Kit.\n\nThis update fixes several vulnerabilities in the Oracle Java Runtime\nEnvironment and the Oracle Java Software Development Kit. Further\ninformation about these flaws can be found on the Oracle Java SE Critical\nPatch Update Advisory page, listed in the References section.\n(CVE-2013-6629, CVE-2013-6954, CVE-2014-0429, CVE-2014-0432, CVE-2014-0446,\nCVE-2014-0448, CVE-2014-0449, CVE-2014-0451, CVE-2014-0452, CVE-2014-0453,\nCVE-2014-0454, CVE-2014-0455, CVE-2014-0456, CVE-2014-0457, CVE-2014-0458,\nCVE-2014-0459, CVE-2014-0460, CVE-2014-0461, CVE-2014-1876, CVE-2014-2397,\nCVE-2014-2398, CVE-2014-2401, CVE-2014-2402, CVE-2014-2403, CVE-2014-2409,\nCVE-2014-2412, CVE-2014-2413, CVE-2014-2414, CVE-2014-2420, CVE-2014-2421,\nCVE-2014-2422, CVE-2014-2423, CVE-2014-2427, CVE-2014-2428)\n\nAll users of java-1.7.0-oracle are advised to upgrade to these updated\npackages, which provide Oracle Java 7 Update 55 and resolve these issues.\nAll running instances of Oracle Java must be restarted for the update to\ntake effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2014:0413", "url": "https://access.redhat.com/errata/RHSA-2014:0413" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#critical", "url": "https://access.redhat.com/security/updates/classification/#critical" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html" }, { "category": "external", "summary": "1031734", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1031734" }, { "category": "external", "summary": "1045561", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045561" }, { "category": "external", "summary": "1060907", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1060907" }, { "category": "external", "summary": "1086632", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1086632" }, { "category": "external", "summary": "1086645", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1086645" }, { "category": "external", "summary": "1087409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087409" }, { "category": "external", "summary": "1087411", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087411" }, { "category": "external", "summary": "1087413", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087413" }, { "category": "external", "summary": "1087417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087417" }, { "category": "external", "summary": "1087423", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087423" }, { "category": "external", "summary": "1087424", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087424" }, { "category": "external", "summary": "1087426", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087426" }, { "category": "external", "summary": "1087427", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087427" }, { "category": "external", "summary": "1087428", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087428" }, { "category": "external", "summary": "1087430", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087430" }, { "category": "external", "summary": "1087431", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087431" }, { "category": "external", "summary": "1087434", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087434" }, { "category": "external", "summary": "1087436", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087436" }, { "category": "external", "summary": "1087438", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087438" }, { "category": "external", "summary": "1087439", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087439" }, { "category": "external", "summary": "1087440", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087440" }, { "category": "external", "summary": "1087441", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087441" }, { "category": "external", "summary": "1087442", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087442" }, { "category": "external", "summary": "1087443", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087443" }, { "category": "external", "summary": "1087444", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087444" }, { "category": "external", "summary": "1087446", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087446" }, { "category": "external", "summary": "1088023", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088023" }, { "category": "external", "summary": "1088024", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088024" }, { "category": "external", "summary": "1088025", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088025" }, { "category": "external", "summary": "1088026", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088026" }, { "category": "external", "summary": "1088027", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088027" }, { "category": "external", "summary": "1088028", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088028" }, { "category": "external", "summary": "1088030", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088030" }, { "category": "external", "summary": "1088031", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088031" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0413.json" } ], "title": "Red Hat Security Advisory: java-1.7.0-oracle security update", "tracking": { "current_release_date": "2024-11-14T14:27:46+00:00", "generator": { "date": "2024-11-14T14:27:46+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.0" } }, "id": "RHSA-2014:0413", "initial_release_date": "2014-04-17T09:28:25+00:00", "revision_history": [ { "date": "2014-04-17T09:28:25+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-12-15T14:38:34+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T14:27:46+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Desktop 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Server 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Workstation 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Desktop 5", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:5" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Server 5", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:5" } } } ], "category": "product_family", "name": "Oracle Java for Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "product_id": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.55-1jpp.1.el6_5?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.55-1jpp.1.el6_5?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "product": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.55-1jpp.1.el6_5?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "product": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "product_id": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.55-1jpp.1.el6_5?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.55-1jpp.1.el6_5?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.55-1jpp.1.el6_5?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_id": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.55-1jpp.1.el6_5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.55-1jpp.1.el6_5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.55-1jpp.1.el6_5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_id": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.55-1jpp.1.el6_5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.55-1jpp.1.el6_5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.55-1jpp.1.el6_5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.55-1jpp.2.el5_10?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.55-1jpp.2.el5_10?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.55-1jpp.2.el5_10?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_id": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.55-1jpp.2.el5_10?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_id": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.55-1jpp.2.el5_10?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.55-1jpp.2.el5_10?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.55-1jpp.2.el5_10?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "product": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.55-1jpp.2.el5_10?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.55-1jpp.2.el5_10?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "product_id": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.55-1jpp.2.el5_10?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "product": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "product_id": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.55-1jpp.2.el5_10?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.55-1jpp.2.el5_10?arch=i386\u0026epoch=1" } } } ], "category": "architecture", "name": "i386" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" } ] }, "vulnerabilities": [ { "cve": "CVE-2013-6629", "cwe": { "id": "CWE-456", "name": "Missing Initialization of a Variable" }, "discovery_date": "2013-11-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1031734" } ], "notes": [ { "category": "description", "text": "The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.", "title": "Vulnerability description" }, { "category": "summary", "text": "libjpeg: information leak (read of uninitialized memory)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-6629" }, { "category": "external", "summary": "RHBZ#1031734", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1031734" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-6629", "url": "https://www.cve.org/CVERecord?id=CVE-2013-6629" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-6629", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6629" } ], "release_date": "2013-11-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "libjpeg: information leak (read of uninitialized memory)" }, { "cve": "CVE-2013-6954", "discovery_date": "2013-12-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1045561" } ], "notes": [ { "category": "description", "text": "The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.", "title": "Vulnerability description" }, { "category": "summary", "text": "libpng: unhandled zero-length PLTE chunk or NULL palette", "title": "Vulnerability summary" }, { "category": "other", "text": "Not Vulnerable. This issue does not affect the version of libpng as shipped with Red Hat Enterprise Linux 5 and 6.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-6954" }, { "category": "external", "summary": "RHBZ#1045561", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045561" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-6954", "url": "https://www.cve.org/CVERecord?id=CVE-2013-6954" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-6954", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6954" } ], "release_date": "2013-12-19T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "libpng: unhandled zero-length PLTE chunk or NULL palette" }, { "cve": "CVE-2014-0429", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087409" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: Incorrect mlib/raster image validation (2D, 8027841)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0429" }, { "category": "external", "summary": "RHBZ#1087409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0429", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0429" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0429", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0429" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: Incorrect mlib/raster image validation (2D, 8027841)" }, { "cve": "CVE-2014-0432", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088023" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0455 and CVE-2014-2402.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 7u55 and 8u5 (Libraries)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0432" }, { "category": "external", "summary": "RHBZ#1088023", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088023" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0432", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0432" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0432", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0432" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "JDK: unspecified vulnerability fixed in 7u55 and 8u5 (Libraries)" }, { "cve": "CVE-2014-0446", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087439" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: Protect logger handlers (Libraries, 8029740)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0446" }, { "category": "external", "summary": "RHBZ#1087439", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087439" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0446", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0446" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0446", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0446" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: Protect logger handlers (Libraries, 8029740)" }, { "cve": "CVE-2014-0448", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088024" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 7u55 and 8u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0448" }, { "category": "external", "summary": "RHBZ#1088024", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088024" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0448", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0448" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0448", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0448" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "JDK: unspecified vulnerability fixed in 7u55 and 8u5 (Deployment)" }, { "cve": "CVE-2014-0449", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088028" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via unknown vectors related to Deployment.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0449" }, { "category": "external", "summary": "RHBZ#1088028", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088028" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0449", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0449" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0449", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0449" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)" }, { "cve": "CVE-2014-0451", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087428" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-2412.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: AWT incorrect FlavorMap seperation (AWT, 8026797)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0451" }, { "category": "external", "summary": "RHBZ#1087428", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087428" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0451", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0451" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0451", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0451" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: AWT incorrect FlavorMap seperation (AWT, 8026797)" }, { "cve": "CVE-2014-0452", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087436" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0458 and CVE-2014-2423.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026801)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0452" }, { "category": "external", "summary": "RHBZ#1087436", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087436" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0452", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0452" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0452", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0452" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026801)" }, { "cve": "CVE-2014-0453", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1086645" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: RSA unpadding timing issues (Security, 8027766)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0453" }, { "category": "external", "summary": "RHBZ#1086645", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1086645" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0453", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0453" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0453", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0453" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: RSA unpadding timing issues (Security, 8027766)" }, { "cve": "CVE-2014-0454", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087440" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: Prevent SIGNATURE_PRIMITIVE_SET from being modified (Security, 8029745)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0454" }, { "category": "external", "summary": "RHBZ#1087440", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087440" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0454", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0454" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0454", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0454" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: Prevent SIGNATURE_PRIMITIVE_SET from being modified (Security, 8029745)" }, { "cve": "CVE-2014-0455", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087424" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-2402.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: MethodHandle variable argument lists handling (Libraries, 8029844)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0455" }, { "category": "external", "summary": "RHBZ#1087424", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087424" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0455", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0455" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0455", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0455" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: MethodHandle variable argument lists handling (Libraries, 8029844)" }, { "cve": "CVE-2014-0456", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087413" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: System.arraycopy() element race condition (Hotspot, 8029858)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0456" }, { "category": "external", "summary": "RHBZ#1087413", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087413" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0456", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0456" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0456", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0456" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: System.arraycopy() element race condition (Hotspot, 8029858)" }, { "cve": "CVE-2014-0457", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087411" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: ServiceLoader Exception handling security bypass (Libraries, 8031394)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0457" }, { "category": "external", "summary": "RHBZ#1087411", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087411" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0457", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0457" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0457", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0457" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: ServiceLoader Exception handling security bypass (Libraries, 8031394)" }, { "cve": "CVE-2014-0458", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087430" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-2423.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: Activation framework default command map caching (JAX-WS, 8025152)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0458" }, { "category": "external", "summary": "RHBZ#1087430", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087430" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0458", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0458" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0458", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0458" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: Activation framework default command map caching (JAX-WS, 8025152)" }, { "cve": "CVE-2014-0459", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087444" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.", "title": "Vulnerability description" }, { "category": "summary", "text": "lcms: insufficient ICC profile version validation (OpenJDK 2D, 8031335)", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of lcms as shipped with Red Hat Enterprise Linux 5, 6 and 7. Red Hat Product Security has rated this issue as having Moderate security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0459" }, { "category": "external", "summary": "RHBZ#1087444", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087444" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0459", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0459" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0459", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0459" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "lcms: insufficient ICC profile version validation (OpenJDK 2D, 8031335)" }, { "cve": "CVE-2014-0460", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087442" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: missing randomization of JNDI DNS client query IDs (JNDI, 8030731)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0460" }, { "category": "external", "summary": "RHBZ#1087442", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087442" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0460", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0460" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0460", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0460" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: missing randomization of JNDI DNS client query IDs (JNDI, 8030731)" }, { "cve": "CVE-2014-0461", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087426" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0461" }, { "category": "external", "summary": "RHBZ#1087426", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087426" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0461", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0461" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0461", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0461" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794)" }, { "cve": "CVE-2014-1876", "cwe": { "id": "CWE-377", "name": "Insecure Temporary File" }, "discovery_date": "2014-02-03T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1060907" } ], "notes": [ { "category": "description", "text": "The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insecure temporary file use in unpack200 (Libraries, 8033618)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-1876" }, { "category": "external", "summary": "RHBZ#1060907", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1060907" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1876", "url": "https://www.cve.org/CVERecord?id=CVE-2014-1876" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1876", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1876" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-02-03T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 1.9, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: insecure temporary file use in unpack200 (Libraries, 8033618)" }, { "cve": "CVE-2014-2397", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087423" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: classfile parser invalid BootstrapMethods attribute length (Hotspot, 8034926)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2397" }, { "category": "external", "summary": "RHBZ#1087423", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087423" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2397", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2397" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2397", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2397" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: classfile parser invalid BootstrapMethods attribute length (Hotspot, 8034926)" }, { "acknowledgments": [ { "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-2398", "discovery_date": "2013-10-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1086632" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient escaping of window title string (Javadoc, 8026736)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2398" }, { "category": "external", "summary": "RHBZ#1086632", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1086632" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2398", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2398" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2398", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2398" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 2.6, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: insufficient escaping of window title string (Javadoc, 8026736)" }, { "cve": "CVE-2014-2401", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088030" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 5.0u75, 6u75, 7u55 and 8u5 (2D)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2401" }, { "category": "external", "summary": "RHBZ#1088030", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088030" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2401", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2401" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2401", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2401" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 5.0u75, 6u75, 7u55 and 8u5 (2D)" }, { "cve": "CVE-2014-2402", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087438" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-0455.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: Incorrect NIO channel separation (Libraries, 8026716)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2402" }, { "category": "external", "summary": "RHBZ#1087438", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087438" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2402", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2402" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2402", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2402" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: Incorrect NIO channel separation (Libraries, 8026716)" }, { "cve": "CVE-2014-2403", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087443" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via vectors related to JAXP.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: JAXP CharInfo file access restriction (JAXP, 8029282)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2403" }, { "category": "external", "summary": "RHBZ#1087443", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087443" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2403", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2403" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2403", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2403" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: JAXP CharInfo file access restriction (JAXP, 8029282)" }, { "cve": "CVE-2014-2409", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088027" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2409" }, { "category": "external", "summary": "RHBZ#1088027", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088027" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2409", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2409" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2409", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2409" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)" }, { "cve": "CVE-2014-2412", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087427" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-0451.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: AWT thread context handling (AWT, 8025010)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2412" }, { "category": "external", "summary": "RHBZ#1087427", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087427" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2412", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2412" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2412", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2412" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: AWT thread context handling (AWT, 8025010)" }, { "cve": "CVE-2014-2413", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087446" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Libraries.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: method handle call hierachy bypass (Libraries, 8032686)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2413" }, { "category": "external", "summary": "RHBZ#1087446", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087446" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2413", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2413" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2413", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2413" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: method handle call hierachy bypass (Libraries, 8032686)" }, { "cve": "CVE-2014-2414", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087431" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect caching of data initialized via TCCL (JAXB, 8025030)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2414" }, { "category": "external", "summary": "RHBZ#1087431", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087431" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2414", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2414" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2414", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2414" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: incorrect caching of data initialized via TCCL (JAXB, 8025030)" }, { "cve": "CVE-2014-2420", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088031" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Deployment.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2420" }, { "category": "external", "summary": "RHBZ#1088031", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088031" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2420", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2420" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2420", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2420" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.6, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)" }, { "cve": "CVE-2014-2421", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087417" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: JPEG decoder input stream handling (2D, 8029854)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2421" }, { "category": "external", "summary": "RHBZ#1087417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087417" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2421", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2421" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2421", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2421" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: JPEG decoder input stream handling (2D, 8029854)" }, { "cve": "CVE-2014-2422", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088026" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and JavaFX 2.2.51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 7u55 and 8u5 (JavaFX)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2422" }, { "category": "external", "summary": "RHBZ#1088026", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088026" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2422", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2422" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2422", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2422" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "JDK: unspecified vulnerability fixed in 7u55 and 8u5 (JavaFX)" }, { "cve": "CVE-2014-2423", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087434" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-0458.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026188)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2423" }, { "category": "external", "summary": "RHBZ#1087434", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087434" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2423", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2423" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2423", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2423" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026188)" }, { "cve": "CVE-2014-2427", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087441" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: remove insecure Java Sound provider caching (Sound, 8026163)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2427" }, { "category": "external", "summary": "RHBZ#1087441", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087441" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2427", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2427" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2427", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2427" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: remove insecure Java Sound provider caching (Sound, 8026163)" }, { "cve": "CVE-2014-2428", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088025" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2428" }, { "category": "external", "summary": "RHBZ#1088025", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088025" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2428", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2428" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2428", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2428" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)" } ] }
rhsa-2014_0412
Vulnerability from csaf_redhat
Published
2014-04-17 09:28
Modified
2024-11-14 14:27
Summary
Red Hat Security Advisory: java-1.7.0-oracle security update
Notes
Topic
Updated java-1.7.0-oracle packages that fix several security issues are now
available for Red Hat Enterprise Linux 5 and 6 Supplementary.
The Red Hat Security Response Team has rated this update as having Critical
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.
Details
Oracle Java SE version 7 includes the Oracle Java Runtime Environment and
the Oracle Java Software Development Kit.
This update fixes several vulnerabilities in the Oracle Java Runtime
Environment and the Oracle Java Software Development Kit. Further
information about these flaws can be found on the Oracle Java SE Critical
Patch Update Advisory page, listed in the References section.
(CVE-2013-6629, CVE-2013-6954, CVE-2014-0429, CVE-2014-0432, CVE-2014-0446,
CVE-2014-0448, CVE-2014-0449, CVE-2014-0451, CVE-2014-0452, CVE-2014-0453,
CVE-2014-0454, CVE-2014-0455, CVE-2014-0456, CVE-2014-0457, CVE-2014-0458,
CVE-2014-0459, CVE-2014-0460, CVE-2014-0461, CVE-2014-1876, CVE-2014-2397,
CVE-2014-2398, CVE-2014-2401, CVE-2014-2402, CVE-2014-2403, CVE-2014-2409,
CVE-2014-2412, CVE-2014-2413, CVE-2014-2414, CVE-2014-2420, CVE-2014-2421,
CVE-2014-2422, CVE-2014-2423, CVE-2014-2427, CVE-2014-2428)
All users of java-1.7.0-oracle are advised to upgrade to these updated
packages, which provide Oracle Java 7 Update 55 and resolve these issues.
All running instances of Oracle Java must be restarted for the update to
take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated java-1.7.0-oracle packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 5 and 6 Supplementary.\n\nThe Red Hat Security Response Team has rated this update as having Critical\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "Oracle Java SE version 7 includes the Oracle Java Runtime Environment and\nthe Oracle Java Software Development Kit.\n\nThis update fixes several vulnerabilities in the Oracle Java Runtime\nEnvironment and the Oracle Java Software Development Kit. Further\ninformation about these flaws can be found on the Oracle Java SE Critical\nPatch Update Advisory page, listed in the References section.\n(CVE-2013-6629, CVE-2013-6954, CVE-2014-0429, CVE-2014-0432, CVE-2014-0446,\nCVE-2014-0448, CVE-2014-0449, CVE-2014-0451, CVE-2014-0452, CVE-2014-0453,\nCVE-2014-0454, CVE-2014-0455, CVE-2014-0456, CVE-2014-0457, CVE-2014-0458,\nCVE-2014-0459, CVE-2014-0460, CVE-2014-0461, CVE-2014-1876, CVE-2014-2397,\nCVE-2014-2398, CVE-2014-2401, CVE-2014-2402, CVE-2014-2403, CVE-2014-2409,\nCVE-2014-2412, CVE-2014-2413, CVE-2014-2414, CVE-2014-2420, CVE-2014-2421,\nCVE-2014-2422, CVE-2014-2423, CVE-2014-2427, CVE-2014-2428)\n\nAll users of java-1.7.0-oracle are advised to upgrade to these updated\npackages, which provide Oracle Java 7 Update 55 and resolve these issues.\nAll running instances of Oracle Java must be restarted for the update to\ntake effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2014:0412", "url": "https://access.redhat.com/errata/RHSA-2014:0412" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#critical", "url": "https://access.redhat.com/security/updates/classification/#critical" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html" }, { "category": "external", "summary": "1031734", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1031734" }, { "category": "external", "summary": "1045561", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045561" }, { "category": "external", "summary": "1060907", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1060907" }, { "category": "external", "summary": "1086632", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1086632" }, { "category": "external", "summary": "1086645", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1086645" }, { "category": "external", "summary": "1087409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087409" }, { "category": "external", "summary": "1087411", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087411" }, { "category": "external", "summary": "1087413", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087413" }, { "category": "external", "summary": "1087417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087417" }, { "category": "external", "summary": "1087423", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087423" }, { "category": "external", "summary": "1087424", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087424" }, { "category": "external", "summary": "1087426", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087426" }, { "category": "external", "summary": "1087427", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087427" }, { "category": "external", "summary": "1087428", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087428" }, { "category": "external", "summary": "1087430", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087430" }, { "category": "external", "summary": "1087431", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087431" }, { "category": "external", "summary": "1087434", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087434" }, { "category": "external", "summary": "1087436", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087436" }, { "category": "external", "summary": "1087438", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087438" }, { "category": "external", "summary": "1087439", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087439" }, { "category": "external", "summary": "1087440", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087440" }, { "category": "external", "summary": "1087441", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087441" }, { "category": "external", "summary": "1087442", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087442" }, { "category": "external", "summary": "1087443", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087443" }, { "category": "external", "summary": "1087444", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087444" }, { "category": "external", "summary": "1087446", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087446" }, { "category": "external", "summary": "1088023", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088023" }, { "category": "external", "summary": "1088024", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088024" }, { "category": "external", "summary": "1088025", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088025" }, { "category": "external", "summary": "1088026", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088026" }, { "category": "external", "summary": "1088027", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088027" }, { "category": "external", "summary": "1088028", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088028" }, { "category": "external", "summary": "1088030", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088030" }, { "category": "external", "summary": "1088031", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088031" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0412.json" } ], "title": "Red Hat Security Advisory: java-1.7.0-oracle security update", "tracking": { "current_release_date": "2024-11-14T14:27:24+00:00", "generator": { "date": "2024-11-14T14:27:24+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.0" } }, "id": "RHSA-2014:0412", "initial_release_date": "2014-04-17T09:28:34+00:00", "revision_history": [ { "date": "2014-04-17T09:28:34+00:00", "number": "1", "summary": "Initial version" }, { "date": "2014-04-17T09:28:34+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T14:27:24+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.5.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.5.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.5.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.5.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product": { "name": "Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary-5.10.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:5::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Supplementary (v. 5)", "product": { "name": "Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary-5.10.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras:5::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux Supplementary" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "product_id": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.55-1jpp.1.el6_5?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.55-1jpp.1.el6_5?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "product": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.55-1jpp.1.el6_5?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "product": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "product_id": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.55-1jpp.1.el6_5?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.55-1jpp.1.el6_5?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.55-1jpp.1.el6_5?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_id": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.55-1jpp.1.el6_5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.55-1jpp.1.el6_5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.55-1jpp.1.el6_5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_id": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.55-1jpp.1.el6_5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.55-1jpp.1.el6_5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.55-1jpp.1.el6_5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.55-1jpp.2.el5_10?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.55-1jpp.2.el5_10?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.55-1jpp.2.el5_10?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_id": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.55-1jpp.2.el5_10?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_id": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.55-1jpp.2.el5_10?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.55-1jpp.2.el5_10?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.55-1jpp.2.el5_10?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "product": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.55-1jpp.2.el5_10?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.55-1jpp.2.el5_10?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "product_id": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.55-1jpp.2.el5_10?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "product": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "product_id": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.55-1jpp.2.el5_10?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.55-1jpp.2.el5_10?arch=i386\u0026epoch=1" } } } ], "category": "architecture", "name": "i386" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Client-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Client-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Client-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Client-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Client-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Client-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Client-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Client-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Client-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Client-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Client-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)", "product_id": "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Client-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Server-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Server-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Server-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Server-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Server-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Server-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Server-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Server-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Server-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Server-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Server-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)", "product_id": "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Server-Supplementary-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Client-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Client-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Client-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Client-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Client-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Client-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", "product_id": "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Client-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6ComputeNode-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)", "product_id": "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6ComputeNode-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Server-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Server-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Server-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Server-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Server-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Server-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", "product_id": "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Server-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Workstation-Supplementary-6.5.z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", "product_id": "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Workstation-Supplementary-6.5.z" } ] }, "vulnerabilities": [ { "cve": "CVE-2013-6629", "cwe": { "id": "CWE-456", "name": "Missing Initialization of a Variable" }, "discovery_date": "2013-11-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1031734" } ], "notes": [ { "category": "description", "text": "The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.", "title": "Vulnerability description" }, { "category": "summary", "text": "libjpeg: information leak (read of uninitialized memory)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-6629" }, { "category": "external", "summary": "RHBZ#1031734", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1031734" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-6629", "url": "https://www.cve.org/CVERecord?id=CVE-2013-6629" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-6629", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6629" } ], "release_date": "2013-11-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "libjpeg: information leak (read of uninitialized memory)" }, { "cve": "CVE-2013-6954", "discovery_date": "2013-12-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1045561" } ], "notes": [ { "category": "description", "text": "The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.", "title": "Vulnerability description" }, { "category": "summary", "text": "libpng: unhandled zero-length PLTE chunk or NULL palette", "title": "Vulnerability summary" }, { "category": "other", "text": "Not Vulnerable. This issue does not affect the version of libpng as shipped with Red Hat Enterprise Linux 5 and 6.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-6954" }, { "category": "external", "summary": "RHBZ#1045561", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045561" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-6954", "url": "https://www.cve.org/CVERecord?id=CVE-2013-6954" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-6954", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6954" } ], "release_date": "2013-12-19T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "libpng: unhandled zero-length PLTE chunk or NULL palette" }, { "cve": "CVE-2014-0429", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087409" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: Incorrect mlib/raster image validation (2D, 8027841)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0429" }, { "category": "external", "summary": "RHBZ#1087409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0429", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0429" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0429", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0429" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: Incorrect mlib/raster image validation (2D, 8027841)" }, { "cve": "CVE-2014-0432", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088023" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0455 and CVE-2014-2402.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 7u55 and 8u5 (Libraries)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0432" }, { "category": "external", "summary": "RHBZ#1088023", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088023" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0432", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0432" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0432", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0432" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "JDK: unspecified vulnerability fixed in 7u55 and 8u5 (Libraries)" }, { "cve": "CVE-2014-0446", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087439" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: Protect logger handlers (Libraries, 8029740)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0446" }, { "category": "external", "summary": "RHBZ#1087439", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087439" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0446", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0446" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0446", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0446" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: Protect logger handlers (Libraries, 8029740)" }, { "cve": "CVE-2014-0448", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088024" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 7u55 and 8u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0448" }, { "category": "external", "summary": "RHBZ#1088024", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088024" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0448", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0448" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0448", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0448" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "JDK: unspecified vulnerability fixed in 7u55 and 8u5 (Deployment)" }, { "cve": "CVE-2014-0449", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088028" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via unknown vectors related to Deployment.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0449" }, { "category": "external", "summary": "RHBZ#1088028", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088028" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0449", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0449" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0449", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0449" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)" }, { "cve": "CVE-2014-0451", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087428" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-2412.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: AWT incorrect FlavorMap seperation (AWT, 8026797)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0451" }, { "category": "external", "summary": "RHBZ#1087428", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087428" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0451", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0451" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0451", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0451" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: AWT incorrect FlavorMap seperation (AWT, 8026797)" }, { "cve": "CVE-2014-0452", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087436" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0458 and CVE-2014-2423.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026801)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0452" }, { "category": "external", "summary": "RHBZ#1087436", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087436" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0452", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0452" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0452", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0452" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026801)" }, { "cve": "CVE-2014-0453", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1086645" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: RSA unpadding timing issues (Security, 8027766)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0453" }, { "category": "external", "summary": "RHBZ#1086645", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1086645" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0453", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0453" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0453", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0453" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: RSA unpadding timing issues (Security, 8027766)" }, { "cve": "CVE-2014-0454", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087440" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: Prevent SIGNATURE_PRIMITIVE_SET from being modified (Security, 8029745)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0454" }, { "category": "external", "summary": "RHBZ#1087440", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087440" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0454", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0454" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0454", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0454" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: Prevent SIGNATURE_PRIMITIVE_SET from being modified (Security, 8029745)" }, { "cve": "CVE-2014-0455", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087424" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-2402.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: MethodHandle variable argument lists handling (Libraries, 8029844)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0455" }, { "category": "external", "summary": "RHBZ#1087424", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087424" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0455", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0455" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0455", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0455" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: MethodHandle variable argument lists handling (Libraries, 8029844)" }, { "cve": "CVE-2014-0456", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087413" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: System.arraycopy() element race condition (Hotspot, 8029858)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0456" }, { "category": "external", "summary": "RHBZ#1087413", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087413" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0456", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0456" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0456", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0456" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: System.arraycopy() element race condition (Hotspot, 8029858)" }, { "cve": "CVE-2014-0457", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087411" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: ServiceLoader Exception handling security bypass (Libraries, 8031394)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0457" }, { "category": "external", "summary": "RHBZ#1087411", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087411" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0457", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0457" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0457", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0457" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: ServiceLoader Exception handling security bypass (Libraries, 8031394)" }, { "cve": "CVE-2014-0458", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087430" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-2423.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: Activation framework default command map caching (JAX-WS, 8025152)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0458" }, { "category": "external", "summary": "RHBZ#1087430", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087430" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0458", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0458" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0458", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0458" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: Activation framework default command map caching (JAX-WS, 8025152)" }, { "cve": "CVE-2014-0459", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087444" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.", "title": "Vulnerability description" }, { "category": "summary", "text": "lcms: insufficient ICC profile version validation (OpenJDK 2D, 8031335)", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of lcms as shipped with Red Hat Enterprise Linux 5, 6 and 7. Red Hat Product Security has rated this issue as having Moderate security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0459" }, { "category": "external", "summary": "RHBZ#1087444", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087444" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0459", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0459" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0459", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0459" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "lcms: insufficient ICC profile version validation (OpenJDK 2D, 8031335)" }, { "cve": "CVE-2014-0460", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087442" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: missing randomization of JNDI DNS client query IDs (JNDI, 8030731)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0460" }, { "category": "external", "summary": "RHBZ#1087442", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087442" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0460", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0460" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0460", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0460" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: missing randomization of JNDI DNS client query IDs (JNDI, 8030731)" }, { "cve": "CVE-2014-0461", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087426" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0461" }, { "category": "external", "summary": "RHBZ#1087426", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087426" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0461", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0461" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0461", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0461" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794)" }, { "cve": "CVE-2014-1876", "cwe": { "id": "CWE-377", "name": "Insecure Temporary File" }, "discovery_date": "2014-02-03T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1060907" } ], "notes": [ { "category": "description", "text": "The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insecure temporary file use in unpack200 (Libraries, 8033618)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-1876" }, { "category": "external", "summary": "RHBZ#1060907", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1060907" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1876", "url": "https://www.cve.org/CVERecord?id=CVE-2014-1876" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1876", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1876" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-02-03T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 1.9, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: insecure temporary file use in unpack200 (Libraries, 8033618)" }, { "cve": "CVE-2014-2397", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087423" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: classfile parser invalid BootstrapMethods attribute length (Hotspot, 8034926)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2397" }, { "category": "external", "summary": "RHBZ#1087423", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087423" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2397", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2397" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2397", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2397" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: classfile parser invalid BootstrapMethods attribute length (Hotspot, 8034926)" }, { "acknowledgments": [ { "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-2398", "discovery_date": "2013-10-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1086632" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient escaping of window title string (Javadoc, 8026736)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2398" }, { "category": "external", "summary": "RHBZ#1086632", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1086632" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2398", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2398" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2398", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2398" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 2.6, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: insufficient escaping of window title string (Javadoc, 8026736)" }, { "cve": "CVE-2014-2401", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088030" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 5.0u75, 6u75, 7u55 and 8u5 (2D)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2401" }, { "category": "external", "summary": "RHBZ#1088030", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088030" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2401", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2401" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2401", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2401" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 5.0u75, 6u75, 7u55 and 8u5 (2D)" }, { "cve": "CVE-2014-2402", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087438" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-0455.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: Incorrect NIO channel separation (Libraries, 8026716)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2402" }, { "category": "external", "summary": "RHBZ#1087438", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087438" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2402", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2402" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2402", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2402" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: Incorrect NIO channel separation (Libraries, 8026716)" }, { "cve": "CVE-2014-2403", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087443" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via vectors related to JAXP.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: JAXP CharInfo file access restriction (JAXP, 8029282)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2403" }, { "category": "external", "summary": "RHBZ#1087443", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087443" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2403", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2403" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2403", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2403" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: JAXP CharInfo file access restriction (JAXP, 8029282)" }, { "cve": "CVE-2014-2409", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088027" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2409" }, { "category": "external", "summary": "RHBZ#1088027", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088027" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2409", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2409" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2409", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2409" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)" }, { "cve": "CVE-2014-2412", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087427" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-0451.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: AWT thread context handling (AWT, 8025010)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2412" }, { "category": "external", "summary": "RHBZ#1087427", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087427" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2412", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2412" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2412", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2412" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: AWT thread context handling (AWT, 8025010)" }, { "cve": "CVE-2014-2413", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087446" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Libraries.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: method handle call hierachy bypass (Libraries, 8032686)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2413" }, { "category": "external", "summary": "RHBZ#1087446", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087446" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2413", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2413" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2413", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2413" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: method handle call hierachy bypass (Libraries, 8032686)" }, { "cve": "CVE-2014-2414", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087431" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect caching of data initialized via TCCL (JAXB, 8025030)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2414" }, { "category": "external", "summary": "RHBZ#1087431", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087431" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2414", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2414" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2414", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2414" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: incorrect caching of data initialized via TCCL (JAXB, 8025030)" }, { "cve": "CVE-2014-2420", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088031" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Deployment.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2420" }, { "category": "external", "summary": "RHBZ#1088031", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088031" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2420", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2420" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2420", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2420" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.6, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)" }, { "cve": "CVE-2014-2421", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087417" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: JPEG decoder input stream handling (2D, 8029854)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2421" }, { "category": "external", "summary": "RHBZ#1087417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087417" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2421", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2421" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2421", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2421" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: JPEG decoder input stream handling (2D, 8029854)" }, { "cve": "CVE-2014-2422", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088026" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and JavaFX 2.2.51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 7u55 and 8u5 (JavaFX)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2422" }, { "category": "external", "summary": "RHBZ#1088026", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088026" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2422", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2422" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2422", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2422" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "JDK: unspecified vulnerability fixed in 7u55 and 8u5 (JavaFX)" }, { "cve": "CVE-2014-2423", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087434" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-0458.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026188)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2423" }, { "category": "external", "summary": "RHBZ#1087434", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087434" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2423", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2423" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2423", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2423" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026188)" }, { "cve": "CVE-2014-2427", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087441" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: remove insecure Java Sound provider caching (Sound, 8026163)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2427" }, { "category": "external", "summary": "RHBZ#1087441", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087441" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2427", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2427" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2427", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2427" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: remove insecure Java Sound provider caching (Sound, 8026163)" }, { "cve": "CVE-2014-2428", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088025" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2428" }, { "category": "external", "summary": "RHBZ#1088025", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088025" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2428", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2428" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2428", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2428" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:34+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0412" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-Supplementary-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-Supplementary-6.5.z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)" } ] }
gsd-2014-0432
Vulnerability from gsd
Modified
2023-12-13 01:22
Details
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0455 and CVE-2014-2402.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2014-0432", "description": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0455 and CVE-2014-2402.", "id": "GSD-2014-0432", "references": [ "https://access.redhat.com/errata/RHSA-2014:0413", "https://access.redhat.com/errata/RHSA-2014:0412", "https://www.suse.com/security/cve/CVE-2014-0432.html" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2014-0432" ], "details": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0455 and CVE-2014-2402.", "id": "GSD-2014-0432", "modified": "2023-12-13T01:22:44.732195Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "secalert_us@oracle.com", "ID": "CVE-2014-0432", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0455 and CVE-2014-2402." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "HPSBUX03091", "refsource": "HP", "url": "http://marc.info/?l=bugtraq\u0026m=140852886808946\u0026w=2" }, { "name": "RHSA-2014:0413", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2014:0413" }, { "name": "SSRT101667", "refsource": "HP", "url": "http://marc.info/?l=bugtraq\u0026m=140852886808946\u0026w=2" }, { "name": "66897", "refsource": "BID", "url": "http://www.securityfocus.com/bid/66897" }, { "name": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html" }, { "name": "GLSA-201502-12", "refsource": "GENTOO", "url": "http://security.gentoo.org/glsa/glsa-201502-12.xml" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:oracle:jdk:1.7.0:update51:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:jre:1.7.0:update51:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:jdk:1.8.0:-:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:jre:1.8.0:-:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "secalert_us@oracle.com", "ID": "CVE-2014-0432" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0455 and CVE-2014-2402." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ] } ] }, "references": { "reference_data": [ { "name": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html", "refsource": "CONFIRM", "tags": [ "Vendor Advisory" ], "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html" }, { "name": "GLSA-201502-12", "refsource": "GENTOO", "tags": [ "Third Party Advisory" ], "url": "http://security.gentoo.org/glsa/glsa-201502-12.xml" }, { "name": "SSRT101667", "refsource": "HP", "tags": [ "Issue Tracking", "Mailing List", "Third Party Advisory" ], "url": "http://marc.info/?l=bugtraq\u0026m=140852886808946\u0026w=2" }, { "name": "66897", "refsource": "BID", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "http://www.securityfocus.com/bid/66897" }, { "name": "RHSA-2014:0413", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ] } }, "impact": { "baseMetricV2": { "cvssV2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0" }, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "userInteractionRequired": false } }, "lastModifiedDate": "2022-05-13T14:57Z", "publishedDate": "2014-04-16T00:55Z" } } }
Loading...
Loading...
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.