RHSA-2014:0902Critical

Red Hat Security Advisory: java-1.7.0-oracle security update

Published
July 18, 2014
Last Modified
November 7, 2026

🔗 CVE IDs covered (18)

CVE-2014-2483 →CVE-2014-2490 →CVE-2014-4208 →CVE-2014-4209 →CVE-2014-4216 →CVE-2014-4218 →CVE-2014-4219 →CVE-2014-4220 →CVE-2014-4221 →CVE-2014-4223 →CVE-2014-4227 →CVE-2014-4244 →CVE-2014-4252 →CVE-2014-4262 →CVE-2014-4263 →CVE-2014-4264 →CVE-2014-4265 →CVE-2014-4266 →

📋 Description

CVE-2014-2483 — OpenJDK: Restrict use of privileged annotations (Libraries, 8034985) CVE-2014-2490 — OpenJDK: Event logger format string vulnerability (Hotspot, 8037076) CVE-2014-4208 — JDK: unspecified vulnerability fixed in 7u65 and 8u11 (Deployment) CVE-2014-4209 — OpenJDK: SubjectDelegator protection insufficient (JMX, 8029755) CVE-2014-4216 — OpenJDK: Incorrect generic signature attribute parsing (Hotspot, 8037076) CVE-2014-4218 — OpenJDK: Clone interfaces passed to proxy methods (Libraries, 8035009) CVE-2014-4219 — OpenJDK: Bytecode verification does not prevent ctor calls to this() and super() (Hotspot, 8035119) CVE-2014-4220 — JDK: unspecified vulnerability fixed in 7u65 and 8u11 (Deployment) CVE-2014-4221 — OpenJDK: MethodHandles.Lookup insufficient modifiers checks (Libraries, 8035788) CVE-2014-4223 — OpenJDK: Incorrect handling of invocations with exhausted ranks (Libraries, 8035793) CVE-2014-4227 — JDK: unspecified vulnerability fixed in 6u81, 7u65 and 8u11 (Deployment) CVE-2014-4244 — OpenJDK: RSA blinding issues (Security, 8031346) CVE-2014-4252 — OpenJDK: Prevent instantiation of service with non-public constructor (Security, 8035004) CVE-2014-4262 — OpenJDK: AtomicReferenceFieldUpdater missing primitive type check (Libraries, 8039520) CVE-2014-4263 — OpenJDK: insufficient Diffie-Hellman public key validation (Security, 8037162) CVE-2014-4264 — OpenJDK: Incorrect TLS/EC management (Security, 8031340) CVE-2014-4265 — JDK: unspecified vulnerability fixed in 6u81, 7u65 and 8u11 (Deployment) CVE-2014-4266 — OpenJDK: InfoBuilder incorrect return values (Serviceability, 8033301)

🎯 Affected products108

  • Oracle Java for Red Hat Enterprise Linux Client (v. 7)
  • Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)
  • Oracle Java for Red Hat Enterprise Linux Desktop 5
  • Oracle Java for Red Hat Enterprise Linux Desktop 6
  • Oracle Java for Red Hat Enterprise Linux HPC Node 6
  • Oracle Java for Red Hat Enterprise Linux Server (v. 7)
  • Oracle Java for Red Hat Enterprise Linux Server 5
  • Oracle Java for Red Hat Enterprise Linux Server 6
  • Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)
  • Oracle Java for Red Hat Enterprise Linux Workstation 6
  • java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6
  • java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6
  • java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6
  • java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6
  • java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6
  • java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6
  • java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6
  • java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)
  • java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)
  • java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)
  • java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)
  • java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7.src as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)
  • java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7.src as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)
  • java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7.src as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)
  • java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7.src as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)
  • java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)
  • java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)
  • java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)
  • java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)
  • java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10.i386 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5
  • +78 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258

🔗 References (23)