RHSA-2015:1919High

Red Hat Security Advisory: java-1.8.0-openjdk security update

Published
October 21, 2015
Last Modified
November 5, 2026

🔗 CVE IDs covered (18)

CVE-2015-4860 →CVE-2015-4883 →CVE-2015-4893 →CVE-2015-4911 →CVE-2015-4805 →CVE-2015-4843 →CVE-2015-4844 →CVE-2015-4881 →CVE-2015-4734 →CVE-2015-4806 →CVE-2015-4868 →CVE-2015-4872 →CVE-2015-4842 →CVE-2015-4882 →CVE-2015-4903 →CVE-2015-4803 →CVE-2015-4835 →CVE-2015-4840 →

📋 Description

CVE-2015-4734 — OpenJDK: kerberos realm name leak (JGSS, 8048030) CVE-2015-4803 — OpenJDK: inefficient use of hash tables and lists during XML parsing (JAXP, 8068842) CVE-2015-4805 — OpenJDK: missing checks for proper initialization in ObjectStreamClass (Serialization, 8103671) CVE-2015-4806 — OpenJDK: HttpURLConnection header restriction bypass (Libraries, 8130193) CVE-2015-4835 — OpenJDK: insufficient permission checks in StubGenerator (CORBA, 8076383) CVE-2015-4840 — OpenJDK: OOB access in CMS code (2D, 8086092) CVE-2015-4842 — OpenJDK: leak of user.dir location (JAXP, 8078427) CVE-2015-4843 — OpenJDK: java.nio Buffers integer overflow issues (Libraries, 8130891) CVE-2015-4844 — ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042) CVE-2015-4860 — OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688) CVE-2015-4868 — OpenJDK: CRL checking flaw (Libraries, 8081744) CVE-2015-4872 — OpenJDK: incomplete constraints enforcement by AlgorithmChecker (Security, 8131291) CVE-2015-4881 — OpenJDK: missing type checks in IIOPInputStream (CORBA, 8076392) CVE-2015-4882 — OpenJDK: incorrect String object deserialization in IIOPInputStream (CORBA, 8076387) CVE-2015-4883 — OpenJDK: incorrect access control context used in DGCClient (RMI, 8076413) CVE-2015-4893 — OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733) CVE-2015-4903 — OpenJDK: insufficient proxy class checks in RemoteObjectInvocationHandler (RMI, 8076339) CVE-2015-4911 — OpenJDK: incomplete supportDTD enforcement (JAXP, 8130078)

🎯 Affected products178

  • Red Hat Enterprise Linux Client (v. 7)
  • Red Hat Enterprise Linux Client Optional (v. 7)
  • Red Hat Enterprise Linux ComputeNode (v. 7)
  • Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • Red Hat Enterprise Linux Desktop (v. 6)
  • Red Hat Enterprise Linux Desktop Optional (v. 6)
  • Red Hat Enterprise Linux HPC Node (v. 6)
  • Red Hat Enterprise Linux HPC Node Optional (v. 6)
  • Red Hat Enterprise Linux Server (v. 6)
  • Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Enterprise Linux Server Optional (v. 6)
  • Red Hat Enterprise Linux Server Optional (v. 7)
  • Red Hat Enterprise Linux Workstation (v. 6)
  • Red Hat Enterprise Linux Workstation (v. 7)
  • Red Hat Enterprise Linux Workstation Optional (v. 6)
  • Red Hat Enterprise Linux Workstation Optional (v. 7)
  • java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
  • java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7.src as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7.src as a component of Red Hat Enterprise Linux Server (v. 6)
  • java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7.src as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)
  • java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)
  • java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)
  • java-1.8.0-openjdk-1:1.8.0.65-0.b17.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)
  • java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)
  • java-1.8.0-openjdk-1:1.8.0.65-2.b17.ael7b_1.src as a component of Red Hat Enterprise Linux Server (v. 7)
  • java-1.8.0-openjdk-1:1.8.0.65-2.b17.el7_1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • +148 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (21)