Red Hat Security Advisory: java-1.7.0-openjdk security and bug fix update

CVE-2014-6457 — OpenJDK: Triple Handshake attack against TLS/SSL connections (JSSE, 8037066) CVE-2014-6502 — OpenJDK: LogRecord use of incorrect CL when loading ResourceBundle (Libraries, 8042797) CVE-2014-6504 — OpenJDK: incorrect optimization of range checks in C2 compiler (Hotspot, 8022783) CVE-2014-6506 — OpenJDK: insufficient permission checks when setting resource bundle on system logger (Libraries, 8041564) CVE-2014-6511 — ICU: Layout Engine ContextualSubstitution missing boundary checks (JDK 2D, 8041540) CVE-2014-6512 — OpenJDK: DatagramSocket connected socket missing source check (Libraries, 8039509) CVE-2014-6517 — OpenJDK: StAX parser parameter entity XXE (JAXP, 8039533) CVE-2014-6519 — OpenJDK: missing BootstrapMethods bounds check (Hotspot, 8041717) CVE-2014-6531 — OpenJDK: insufficient ResourceBundle name check (Libraries, 8044274) CVE-2014-6558 — OpenJDK: CipherInputStream incorrect exception handling (Security, 8037846)