rhsa-2014_0413
Vulnerability from csaf_redhat
Published
2014-04-17 09:28
Modified
2024-11-14 14:27
Summary
Red Hat Security Advisory: java-1.7.0-oracle security update
Notes
Topic
Updated java-1.7.0-oracle packages that fix several security issues are now
available for Oracle Java for Red Hat Enterprise Linux 5 and 6.
The Red Hat Security Response Team has rated this update as having Critical
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.
[Updated 12th May 2014]
The package list in this erratum has been updated to make the packages
available in the Oracle Java for Red Hat Enterprise Linux 6 Workstation
x86_64 channels on the Red Hat Network.
Details
Oracle Java SE version 7 includes the Oracle Java Runtime Environment and
the Oracle Java Software Development Kit.
This update fixes several vulnerabilities in the Oracle Java Runtime
Environment and the Oracle Java Software Development Kit. Further
information about these flaws can be found on the Oracle Java SE Critical
Patch Update Advisory page, listed in the References section.
(CVE-2013-6629, CVE-2013-6954, CVE-2014-0429, CVE-2014-0432, CVE-2014-0446,
CVE-2014-0448, CVE-2014-0449, CVE-2014-0451, CVE-2014-0452, CVE-2014-0453,
CVE-2014-0454, CVE-2014-0455, CVE-2014-0456, CVE-2014-0457, CVE-2014-0458,
CVE-2014-0459, CVE-2014-0460, CVE-2014-0461, CVE-2014-1876, CVE-2014-2397,
CVE-2014-2398, CVE-2014-2401, CVE-2014-2402, CVE-2014-2403, CVE-2014-2409,
CVE-2014-2412, CVE-2014-2413, CVE-2014-2414, CVE-2014-2420, CVE-2014-2421,
CVE-2014-2422, CVE-2014-2423, CVE-2014-2427, CVE-2014-2428)
All users of java-1.7.0-oracle are advised to upgrade to these updated
packages, which provide Oracle Java 7 Update 55 and resolve these issues.
All running instances of Oracle Java must be restarted for the update to
take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated java-1.7.0-oracle packages that fix several security issues are now\navailable for Oracle Java for Red Hat Enterprise Linux 5 and 6.\n\nThe Red Hat Security Response Team has rated this update as having Critical\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.\n\n[Updated 12th May 2014]\nThe package list in this erratum has been updated to make the packages\navailable in the Oracle Java for Red Hat Enterprise Linux 6 Workstation\nx86_64 channels on the Red Hat Network.", "title": "Topic" }, { "category": "general", "text": "Oracle Java SE version 7 includes the Oracle Java Runtime Environment and\nthe Oracle Java Software Development Kit.\n\nThis update fixes several vulnerabilities in the Oracle Java Runtime\nEnvironment and the Oracle Java Software Development Kit. Further\ninformation about these flaws can be found on the Oracle Java SE Critical\nPatch Update Advisory page, listed in the References section.\n(CVE-2013-6629, CVE-2013-6954, CVE-2014-0429, CVE-2014-0432, CVE-2014-0446,\nCVE-2014-0448, CVE-2014-0449, CVE-2014-0451, CVE-2014-0452, CVE-2014-0453,\nCVE-2014-0454, CVE-2014-0455, CVE-2014-0456, CVE-2014-0457, CVE-2014-0458,\nCVE-2014-0459, CVE-2014-0460, CVE-2014-0461, CVE-2014-1876, CVE-2014-2397,\nCVE-2014-2398, CVE-2014-2401, CVE-2014-2402, CVE-2014-2403, CVE-2014-2409,\nCVE-2014-2412, CVE-2014-2413, CVE-2014-2414, CVE-2014-2420, CVE-2014-2421,\nCVE-2014-2422, CVE-2014-2423, CVE-2014-2427, CVE-2014-2428)\n\nAll users of java-1.7.0-oracle are advised to upgrade to these updated\npackages, which provide Oracle Java 7 Update 55 and resolve these issues.\nAll running instances of Oracle Java must be restarted for the update to\ntake effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2014:0413", "url": "https://access.redhat.com/errata/RHSA-2014:0413" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#critical", "url": "https://access.redhat.com/security/updates/classification/#critical" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html" }, { "category": "external", "summary": "1031734", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1031734" }, { "category": "external", "summary": "1045561", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045561" }, { "category": "external", "summary": "1060907", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1060907" }, { "category": "external", "summary": "1086632", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1086632" }, { "category": "external", "summary": "1086645", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1086645" }, { "category": "external", "summary": "1087409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087409" }, { "category": "external", "summary": "1087411", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087411" }, { "category": "external", "summary": "1087413", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087413" }, { "category": "external", "summary": "1087417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087417" }, { "category": "external", "summary": "1087423", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087423" }, { "category": "external", "summary": "1087424", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087424" }, { "category": "external", "summary": "1087426", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087426" }, { "category": "external", "summary": "1087427", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087427" }, { "category": "external", "summary": "1087428", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087428" }, { "category": "external", "summary": "1087430", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087430" }, { "category": "external", "summary": "1087431", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087431" }, { "category": "external", "summary": "1087434", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087434" }, { "category": "external", "summary": "1087436", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087436" }, { "category": "external", "summary": "1087438", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087438" }, { "category": "external", "summary": "1087439", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087439" }, { "category": "external", "summary": "1087440", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087440" }, { "category": "external", "summary": "1087441", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087441" }, { "category": "external", "summary": "1087442", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087442" }, { "category": "external", "summary": "1087443", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087443" }, { "category": "external", "summary": "1087444", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087444" }, { "category": "external", "summary": "1087446", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087446" }, { "category": "external", "summary": "1088023", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088023" }, { "category": "external", "summary": "1088024", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088024" }, { "category": "external", "summary": "1088025", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088025" }, { "category": "external", "summary": "1088026", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088026" }, { "category": "external", "summary": "1088027", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088027" }, { "category": "external", "summary": "1088028", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088028" }, { "category": "external", "summary": "1088030", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088030" }, { "category": "external", "summary": "1088031", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088031" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0413.json" } ], "title": "Red Hat Security Advisory: java-1.7.0-oracle security update", "tracking": { "current_release_date": "2024-11-14T14:27:46+00:00", "generator": { "date": "2024-11-14T14:27:46+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.0" } }, "id": "RHSA-2014:0413", "initial_release_date": "2014-04-17T09:28:25+00:00", "revision_history": [ { "date": "2014-04-17T09:28:25+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-12-15T14:38:34+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T14:27:46+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Desktop 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Server 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Workstation 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Desktop 5", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:5" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Server 5", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:5" } } } ], "category": "product_family", "name": "Oracle Java for Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "product_id": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.55-1jpp.1.el6_5?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.55-1jpp.1.el6_5?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "product": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.55-1jpp.1.el6_5?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "product": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "product_id": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.55-1jpp.1.el6_5?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.55-1jpp.1.el6_5?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.55-1jpp.1.el6_5?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_id": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.55-1jpp.1.el6_5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.55-1jpp.1.el6_5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.55-1jpp.1.el6_5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_id": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.55-1jpp.1.el6_5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.55-1jpp.1.el6_5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.55-1jpp.1.el6_5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.55-1jpp.2.el5_10?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.55-1jpp.2.el5_10?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.55-1jpp.2.el5_10?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_id": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.55-1jpp.2.el5_10?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_id": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.55-1jpp.2.el5_10?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.55-1jpp.2.el5_10?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.55-1jpp.2.el5_10?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "product": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.55-1jpp.2.el5_10?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.55-1jpp.2.el5_10?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "product_id": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.55-1jpp.2.el5_10?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "product": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "product_id": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.55-1jpp.2.el5_10?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.55-1jpp.2.el5_10?arch=i386\u0026epoch=1" } } } ], "category": "architecture", "name": "i386" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5", "product_id": "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Client-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 5", "product_id": "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "relates_to_product_reference": "5Server-OracleJava-5.10.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.5.Z" } ] }, "vulnerabilities": [ { "cve": "CVE-2013-6629", "cwe": { "id": "CWE-456", "name": "Missing Initialization of a Variable" }, "discovery_date": "2013-11-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1031734" } ], "notes": [ { "category": "description", "text": "The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.", "title": "Vulnerability description" }, { "category": "summary", "text": "libjpeg: information leak (read of uninitialized memory)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-6629" }, { "category": "external", "summary": "RHBZ#1031734", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1031734" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-6629", "url": "https://www.cve.org/CVERecord?id=CVE-2013-6629" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-6629", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6629" } ], "release_date": "2013-11-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "libjpeg: information leak (read of uninitialized memory)" }, { "cve": "CVE-2013-6954", "discovery_date": "2013-12-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1045561" } ], "notes": [ { "category": "description", "text": "The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, related to pngrtran.c and pngset.c.", "title": "Vulnerability description" }, { "category": "summary", "text": "libpng: unhandled zero-length PLTE chunk or NULL palette", "title": "Vulnerability summary" }, { "category": "other", "text": "Not Vulnerable. This issue does not affect the version of libpng as shipped with Red Hat Enterprise Linux 5 and 6.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-6954" }, { "category": "external", "summary": "RHBZ#1045561", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045561" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-6954", "url": "https://www.cve.org/CVERecord?id=CVE-2013-6954" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-6954", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6954" } ], "release_date": "2013-12-19T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "libpng: unhandled zero-length PLTE chunk or NULL palette" }, { "cve": "CVE-2014-0429", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087409" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: Incorrect mlib/raster image validation (2D, 8027841)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0429" }, { "category": "external", "summary": "RHBZ#1087409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0429", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0429" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0429", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0429" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: Incorrect mlib/raster image validation (2D, 8027841)" }, { "cve": "CVE-2014-0432", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088023" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0455 and CVE-2014-2402.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 7u55 and 8u5 (Libraries)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0432" }, { "category": "external", "summary": "RHBZ#1088023", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088023" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0432", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0432" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0432", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0432" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "JDK: unspecified vulnerability fixed in 7u55 and 8u5 (Libraries)" }, { "cve": "CVE-2014-0446", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087439" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: Protect logger handlers (Libraries, 8029740)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0446" }, { "category": "external", "summary": "RHBZ#1087439", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087439" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0446", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0446" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0446", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0446" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: Protect logger handlers (Libraries, 8029740)" }, { "cve": "CVE-2014-0448", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088024" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 7u55 and 8u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0448" }, { "category": "external", "summary": "RHBZ#1088024", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088024" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0448", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0448" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0448", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0448" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "JDK: unspecified vulnerability fixed in 7u55 and 8u5 (Deployment)" }, { "cve": "CVE-2014-0449", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088028" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via unknown vectors related to Deployment.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0449" }, { "category": "external", "summary": "RHBZ#1088028", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088028" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0449", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0449" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0449", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0449" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)" }, { "cve": "CVE-2014-0451", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087428" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-2412.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: AWT incorrect FlavorMap seperation (AWT, 8026797)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0451" }, { "category": "external", "summary": "RHBZ#1087428", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087428" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0451", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0451" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0451", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0451" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: AWT incorrect FlavorMap seperation (AWT, 8026797)" }, { "cve": "CVE-2014-0452", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087436" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0458 and CVE-2014-2423.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026801)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0452" }, { "category": "external", "summary": "RHBZ#1087436", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087436" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0452", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0452" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0452", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0452" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026801)" }, { "cve": "CVE-2014-0453", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1086645" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: RSA unpadding timing issues (Security, 8027766)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0453" }, { "category": "external", "summary": "RHBZ#1086645", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1086645" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0453", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0453" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0453", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0453" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: RSA unpadding timing issues (Security, 8027766)" }, { "cve": "CVE-2014-0454", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087440" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: Prevent SIGNATURE_PRIMITIVE_SET from being modified (Security, 8029745)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0454" }, { "category": "external", "summary": "RHBZ#1087440", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087440" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0454", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0454" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0454", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0454" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: Prevent SIGNATURE_PRIMITIVE_SET from being modified (Security, 8029745)" }, { "cve": "CVE-2014-0455", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087424" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-2402.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: MethodHandle variable argument lists handling (Libraries, 8029844)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0455" }, { "category": "external", "summary": "RHBZ#1087424", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087424" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0455", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0455" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0455", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0455" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: MethodHandle variable argument lists handling (Libraries, 8029844)" }, { "cve": "CVE-2014-0456", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087413" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: System.arraycopy() element race condition (Hotspot, 8029858)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0456" }, { "category": "external", "summary": "RHBZ#1087413", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087413" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0456", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0456" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0456", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0456" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: System.arraycopy() element race condition (Hotspot, 8029858)" }, { "cve": "CVE-2014-0457", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087411" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: ServiceLoader Exception handling security bypass (Libraries, 8031394)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0457" }, { "category": "external", "summary": "RHBZ#1087411", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087411" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0457", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0457" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0457", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0457" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: ServiceLoader Exception handling security bypass (Libraries, 8031394)" }, { "cve": "CVE-2014-0458", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087430" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-2423.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: Activation framework default command map caching (JAX-WS, 8025152)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0458" }, { "category": "external", "summary": "RHBZ#1087430", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087430" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0458", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0458" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0458", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0458" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: Activation framework default command map caching (JAX-WS, 8025152)" }, { "cve": "CVE-2014-0459", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087444" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.", "title": "Vulnerability description" }, { "category": "summary", "text": "lcms: insufficient ICC profile version validation (OpenJDK 2D, 8031335)", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of lcms as shipped with Red Hat Enterprise Linux 5, 6 and 7. Red Hat Product Security has rated this issue as having Moderate security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0459" }, { "category": "external", "summary": "RHBZ#1087444", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087444" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0459", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0459" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0459", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0459" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "lcms: insufficient ICC profile version validation (OpenJDK 2D, 8031335)" }, { "cve": "CVE-2014-0460", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087442" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: missing randomization of JNDI DNS client query IDs (JNDI, 8030731)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0460" }, { "category": "external", "summary": "RHBZ#1087442", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087442" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0460", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0460" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0460", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0460" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: missing randomization of JNDI DNS client query IDs (JNDI, 8030731)" }, { "cve": "CVE-2014-0461", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087426" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0461" }, { "category": "external", "summary": "RHBZ#1087426", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087426" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0461", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0461" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0461", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0461" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: Better ScriptEngineManager ScriptEngine management (Libraries, 8036794)" }, { "cve": "CVE-2014-1876", "cwe": { "id": "CWE-377", "name": "Insecure Temporary File" }, "discovery_date": "2014-02-03T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1060907" } ], "notes": [ { "category": "description", "text": "The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insecure temporary file use in unpack200 (Libraries, 8033618)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-1876" }, { "category": "external", "summary": "RHBZ#1060907", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1060907" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1876", "url": "https://www.cve.org/CVERecord?id=CVE-2014-1876" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1876", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1876" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-02-03T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 1.9, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: insecure temporary file use in unpack200 (Libraries, 8033618)" }, { "cve": "CVE-2014-2397", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087423" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: classfile parser invalid BootstrapMethods attribute length (Hotspot, 8034926)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2397" }, { "category": "external", "summary": "RHBZ#1087423", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087423" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2397", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2397" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2397", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2397" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: classfile parser invalid BootstrapMethods attribute length (Hotspot, 8034926)" }, { "acknowledgments": [ { "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2014-2398", "discovery_date": "2013-10-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1086632" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient escaping of window title string (Javadoc, 8026736)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2398" }, { "category": "external", "summary": "RHBZ#1086632", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1086632" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2398", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2398" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2398", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2398" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 2.6, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: insufficient escaping of window title string (Javadoc, 8026736)" }, { "cve": "CVE-2014-2401", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088030" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 5.0u75, 6u75, 7u55 and 8u5 (2D)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2401" }, { "category": "external", "summary": "RHBZ#1088030", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088030" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2401", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2401" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2401", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2401" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 5.0u75, 6u75, 7u55 and 8u5 (2D)" }, { "cve": "CVE-2014-2402", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087438" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-0432 and CVE-2014-0455.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: Incorrect NIO channel separation (Libraries, 8026716)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2402" }, { "category": "external", "summary": "RHBZ#1087438", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087438" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2402", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2402" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2402", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2402" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: Incorrect NIO channel separation (Libraries, 8026716)" }, { "cve": "CVE-2014-2403", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087443" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via vectors related to JAXP.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: JAXP CharInfo file access restriction (JAXP, 8029282)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2403" }, { "category": "external", "summary": "RHBZ#1087443", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087443" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2403", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2403" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2403", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2403" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: JAXP CharInfo file access restriction (JAXP, 8029282)" }, { "cve": "CVE-2014-2409", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088027" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2409" }, { "category": "external", "summary": "RHBZ#1088027", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088027" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2409", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2409" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2409", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2409" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)" }, { "cve": "CVE-2014-2412", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087427" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-0451.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: AWT thread context handling (AWT, 8025010)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2412" }, { "category": "external", "summary": "RHBZ#1087427", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087427" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2412", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2412" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2412", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2412" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: AWT thread context handling (AWT, 8025010)" }, { "cve": "CVE-2014-2413", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087446" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Libraries.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: method handle call hierachy bypass (Libraries, 8032686)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2413" }, { "category": "external", "summary": "RHBZ#1087446", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087446" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2413", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2413" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2413", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2413" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: method handle call hierachy bypass (Libraries, 8032686)" }, { "cve": "CVE-2014-2414", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087431" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect caching of data initialized via TCCL (JAXB, 8025030)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2414" }, { "category": "external", "summary": "RHBZ#1087431", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087431" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2414", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2414" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2414", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2414" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: incorrect caching of data initialized via TCCL (JAXB, 8025030)" }, { "cve": "CVE-2014-2420", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088031" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Deployment.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2420" }, { "category": "external", "summary": "RHBZ#1088031", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088031" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2420", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2420" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2420", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2420" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.6, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)" }, { "cve": "CVE-2014-2421", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087417" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: JPEG decoder input stream handling (2D, 8029854)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2421" }, { "category": "external", "summary": "RHBZ#1087417", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087417" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2421", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2421" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2421", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2421" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: JPEG decoder input stream handling (2D, 8029854)" }, { "cve": "CVE-2014-2422", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088026" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 7u51 and 8, and JavaFX 2.2.51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 7u55 and 8u5 (JavaFX)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2422" }, { "category": "external", "summary": "RHBZ#1088026", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088026" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2422", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2422" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2422", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2422" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "JDK: unspecified vulnerability fixed in 7u55 and 8u5 (JavaFX)" }, { "cve": "CVE-2014-2423", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087434" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-0458.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026188)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2423" }, { "category": "external", "summary": "RHBZ#1087434", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087434" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2423", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2423" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2423", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2423" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026188)" }, { "cve": "CVE-2014-2427", "discovery_date": "2014-04-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1087441" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: remove insecure Java Sound provider caching (Sound, 8026163)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2427" }, { "category": "external", "summary": "RHBZ#1087441", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087441" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2427", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2427" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2427", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2427" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: remove insecure Java Sound provider caching (Sound, 8026163)" }, { "cve": "CVE-2014-2428", "discovery_date": "2014-04-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1088025" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-2428" }, { "category": "external", "summary": "RHBZ#1088025", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088025" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2014-2428", "url": "https://www.cve.org/CVERecord?id=CVE-2014-2428" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-2428", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-2428" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA" } ], "release_date": "2014-04-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2014-04-17T09:28:25+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258", "product_ids": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2014:0413" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Client-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.2.el5_10.x86_64", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.i386", "5Server-OracleJava-5.10.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.2.el5_10.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Client-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6ComputeNode-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Server-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-devel-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-javafx-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-jdbc-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-plugin-1:1.7.0.55-1jpp.1.el6_5.x86_64", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.i686", "6Workstation-OracleJava-6.5.Z:java-1.7.0-oracle-src-1:1.7.0.55-1jpp.1.el6_5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.