Red Hat Security Advisory: java-1.6.0-sun security update
🔗 CVE IDs covered (10)
📋 Description
CVE-2014-4209 — OpenJDK: SubjectDelegator protection insufficient (JMX, 8029755) CVE-2014-4216 — OpenJDK: Incorrect generic signature attribute parsing (Hotspot, 8037076) CVE-2014-4218 — OpenJDK: Clone interfaces passed to proxy methods (Libraries, 8035009) CVE-2014-4219 — OpenJDK: Bytecode verification does not prevent ctor calls to this() and super() (Hotspot, 8035119) CVE-2014-4227 — JDK: unspecified vulnerability fixed in 6u81, 7u65 and 8u11 (Deployment) CVE-2014-4244 — OpenJDK: RSA blinding issues (Security, 8031346) CVE-2014-4252 — OpenJDK: Prevent instantiation of service with non-public constructor (Security, 8035004) CVE-2014-4262 — OpenJDK: AtomicReferenceFieldUpdater missing primitive type check (Libraries, 8039520) CVE-2014-4263 — OpenJDK: insufficient Diffie-Hellman public key validation (Security, 8037162) CVE-2014-4265 — JDK: unspecified vulnerability fixed in 6u81, 7u65 and 8u11 (Deployment)
🎯 Affected products112
- Oracle Java for Red Hat Enterprise Linux Client (v. 7)
- Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)
- Oracle Java for Red Hat Enterprise Linux Desktop 5
- Oracle Java for Red Hat Enterprise Linux Desktop 6
- Oracle Java for Red Hat Enterprise Linux HPC Node 6
- Oracle Java for Red Hat Enterprise Linux Server (v. 7)
- Oracle Java for Red Hat Enterprise Linux Server 5
- Oracle Java for Red Hat Enterprise Linux Server 6
- Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)
- Oracle Java for Red Hat Enterprise Linux Workstation 6
- java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10.i586 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5
- java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10.i586 as a component of Oracle Java for Red Hat Enterprise Linux Server 5
- java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 5
- java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 5
- java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6
- java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6
- java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6
- java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6
- java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6
- java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6
- java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6
- java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6
- java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)
- java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)
- java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)
- java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)
- java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7.src as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)
- java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7.src as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)
- java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7.src as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)
- java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7.src as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)
- +82 more not shown
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
🔗 References (15)
- selfhttps://access.redhat.com/errata/RHSA-2014:0908
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html#AppendixJAVA
- externalhttps://access.redhat.com/solutions/732883
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1075795
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1119475
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1119476
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1119596
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1119600
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1119608
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1119611
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1119613
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1119912
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1119913
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0908.json