(RHSA-2016:1504) Important: java-1.7.0-openjdk security update

2016-07-2700:00:00

access.redhat.com

9.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.011 Low

EPSS

Percentile

82.7%

JSON

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment
and the OpenJDK 7 Java Software Development Kit.

Security Fix(es):

Multiple flaws were discovered in the Hotspot and Libraries components in
OpenJDK. An untrusted Java application or applet could use these flaws to
completely bypass Java sandbox restrictions. (CVE-2016-3606, CVE-2016-3598,
CVE-2016-3610)
Multiple denial of service flaws were found in the JAXP component in OpenJDK.
A specially crafted XML file could cause a Java application using JAXP to
consume an excessive amount of CPU and memory when parsed. (CVE-2016-3500,
CVE-2016-3508)
Multiple flaws were found in the CORBA and Hotsport components in OpenJDK. An
untrusted Java application or applet could use these flaws to bypass certain
Java sandbox restrictions. (CVE-2016-3458, CVE-2016-3550)

OSVersionArchitecturePackageVersionFilename
RedHat7x86_64java-1.7.0-openjdk-devel< 1.7.0.111-2.6.7.2.el7_2java-1.7.0-openjdk-devel-1.7.0.111-2.6.7.2.el7_2.x86_64.rpm
RedHat7s390xjava-1.7.0-openjdk-accessibility< 1.7.0.111-2.6.7.2.el7_2java-1.7.0-openjdk-accessibility-1.7.0.111-2.6.7.2.el7_2.s390x.rpm
RedHat7s390xjava-1.7.0-openjdk-devel< 1.7.0.111-2.6.7.2.el7_2java-1.7.0-openjdk-devel-1.7.0.111-2.6.7.2.el7_2.s390x.rpm
RedHat7ppc64lejava-1.7.0-openjdk-src< 1.7.0.111-2.6.7.2.el7_2java-1.7.0-openjdk-src-1.7.0.111-2.6.7.2.el7_2.ppc64le.rpm
RedHat7x86_64java-1.7.0-openjdk< 1.7.0.111-2.6.7.2.el7_2java-1.7.0-openjdk-1.7.0.111-2.6.7.2.el7_2.x86_64.rpm
RedHat7ppc64java-1.7.0-openjdk-demo< 1.7.0.111-2.6.7.2.el7_2java-1.7.0-openjdk-demo-1.7.0.111-2.6.7.2.el7_2.ppc64.rpm
RedHat6i686java-1.7.0-openjdk< 1.7.0.111-2.6.7.2.el6_8java-1.7.0-openjdk-1.7.0.111-2.6.7.2.el6_8.i686.rpm
RedHat7ppc64java-1.7.0-openjdk-debuginfo< 1.7.0.111-2.6.7.2.el7_2java-1.7.0-openjdk-debuginfo-1.7.0.111-2.6.7.2.el7_2.ppc64.rpm
RedHat6noarchjava-1.7.0-openjdk-javadoc< 1.7.0.111-2.6.7.2.el6_8java-1.7.0-openjdk-javadoc-1.7.0.111-2.6.7.2.el6_8.noarch.rpm
RedHat6srcjava-1.7.0-openjdk< 1.7.0.111-2.6.7.2.el6_8java-1.7.0-openjdk-1.7.0.111-2.6.7.2.el6_8.src.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	7	x86_64	java-1.7.0-openjdk-devel	< 1.7.0.111-2.6.7.2.el7_2	java-1.7.0-openjdk-devel-1.7.0.111-2.6.7.2.el7_2.x86_64.rpm
RedHat	7	s390x	java-1.7.0-openjdk-accessibility	< 1.7.0.111-2.6.7.2.el7_2	java-1.7.0-openjdk-accessibility-1.7.0.111-2.6.7.2.el7_2.s390x.rpm
RedHat	7	s390x	java-1.7.0-openjdk-devel	< 1.7.0.111-2.6.7.2.el7_2	java-1.7.0-openjdk-devel-1.7.0.111-2.6.7.2.el7_2.s390x.rpm
RedHat	7	ppc64le	java-1.7.0-openjdk-src	< 1.7.0.111-2.6.7.2.el7_2	java-1.7.0-openjdk-src-1.7.0.111-2.6.7.2.el7_2.ppc64le.rpm
RedHat	7	x86_64	java-1.7.0-openjdk	< 1.7.0.111-2.6.7.2.el7_2	java-1.7.0-openjdk-1.7.0.111-2.6.7.2.el7_2.x86_64.rpm
RedHat	7	ppc64	java-1.7.0-openjdk-demo	< 1.7.0.111-2.6.7.2.el7_2	java-1.7.0-openjdk-demo-1.7.0.111-2.6.7.2.el7_2.ppc64.rpm
RedHat	6	i686	java-1.7.0-openjdk	< 1.7.0.111-2.6.7.2.el6_8	java-1.7.0-openjdk-1.7.0.111-2.6.7.2.el6_8.i686.rpm
RedHat	7	ppc64	java-1.7.0-openjdk-debuginfo	< 1.7.0.111-2.6.7.2.el7_2	java-1.7.0-openjdk-debuginfo-1.7.0.111-2.6.7.2.el7_2.ppc64.rpm
RedHat	6	noarch	java-1.7.0-openjdk-javadoc	< 1.7.0.111-2.6.7.2.el6_8	java-1.7.0-openjdk-javadoc-1.7.0.111-2.6.7.2.el6_8.noarch.rpm
RedHat	6	src	java-1.7.0-openjdk	< 1.7.0.111-2.6.7.2.el6_8	java-1.7.0-openjdk-1.7.0.111-2.6.7.2.el6_8.src.rpm