Lucene search

K
centosCentOS ProjectCESA-2016:0512
HistoryMar 25, 2016 - 3:44 a.m.

java security update

2016-03-2503:44:42
CentOS Project
lists.centos.org
49

0.036 Low

EPSS

Percentile

91.7%

CentOS Errata and Security Advisory CESA-2016:0512

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment
and the OpenJDK 7 Java Software Development Kit for compiling and executing Java
programs.

Security Fix(es):

  • An improper type safety check was discovered in the Hotspot component. An
    untrusted Java application or applet could use this flaw to bypass Java Sandbox
    restrictions. (CVE-2016-0636)

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2016-March/083937.html
https://lists.centos.org/pipermail/centos-announce/2016-March/083939.html

Affected packages:
java-1.7.0-openjdk
java-1.7.0-openjdk-accessibility
java-1.7.0-openjdk-demo
java-1.7.0-openjdk-devel
java-1.7.0-openjdk-headless
java-1.7.0-openjdk-javadoc
java-1.7.0-openjdk-src

Upstream details at:
https://access.redhat.com/errata/RHSA-2016:0512