Lucene search

K
oraclelinuxOracleLinuxELSA-2019-0464
HistoryMar 05, 2019 - 12:00 a.m.

java-1.7.0-openjdk security update

2019-03-0500:00:00
linux.oracle.com
51

3.1 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

45.8%

[1:1.7.0.211-2.6.17.1.0.1]

  • Update DISTRO_NAME in specfile
    [1:1.7.0.211-2.6.17.1]
  • Produce debug symbols for libpulse-java.so
  • Set IT_CFLAGS=-g so that debug symbols for the pulse audio
  • native library are being produced. This is needed to fix
  • rpmdiff errors of missing .debug_info in pulse-java.so.debug.
  • Resolves: rhbz#1661577
    [1:1.7.0.211-2.6.17.0]
  • Bump to 2.6.17.
  • Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
  • Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
  • Resolves: rhbz#1661577
    [1:1.7.0.201-2.6.17pre01.0]
  • Bump to 2.6.17pre01.
  • Add support for icedtea_snapshot so we can build pre-releases.
  • Resolves: rhbz#1661577

3.1 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

45.8%