Back to search

RHSA-2013:0165: java-1.7.0-openjdk security update

Severity CVSS Published Added Modified
10 (AV:N/AC:L/Au:N/C:C/I:C/A:C) January 09, 2013 January 17, 2013 September 06, 2015

Available Exploits 


These packages provide the OpenJDK 7 Java Runtime Environment and theOpenJDK 7 Software Development Kit.Two improper permission check issues were discovered in the reflection APIin OpenJDK. An untrusted Java application or applet could use these flawsto bypass Java sandbox restrictions. (CVE-2012-3174, CVE-2013-0422)This erratum also upgrades the OpenJDK package to IcedTea7 2.3.4. Refer tothe NEWS file, linked to in the References, for further information.All users of java-1.7.0-openjdk are advised to upgrade to these updatedpackages, which resolve these issues. All running instances of OpenJDK Javamust be restarted for the update to take effect.

Free Nexpose Download

Discover, prioritize, and remediate security risks today!

 Download now




Related Vulnerabilities