Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the Security component does not properly handle null XML namespace (xmlns) attributes during XML document canonicalization, which allows attackers to escape the sandbox.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.7.0-openjdk-develUpgrade java-1.6.0-openjdkUpgrade java-1.7.0-openjdk-demoUpgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdk-demoUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.7.0-openjdkUpgrade java-1.7.0-openjdk-src | Dec 1, 2016 | Jan 15, 2014 |
| Gentoo Linux | — | Upgrade dev-java/oracle-jdk-bin.Upgrade dev-java/sun-jre-bin.Upgrade dev-java/sun-jdk.Upgrade app-emulation/emul-linux-x86-java.Upgrade dev-java/oracle-jre-bin. | Oct 30, 2017 | Jan 15, 2014 |
| Hpux | — | Update Jre60.JRE60-PNV2-H to the latest versionUpdate Jre60.JRE60-IPF32-HS to the latest versionUpdate Jdk60.JDK60 to the latest versionUpdate Jre60.JRE60-IPF32 to the latest versionUpdate Jre60.JRE60-IPF64-HS to the latest versionUpdate Jre60.JRE60-PWV2 to the latest versionUpdate Jre60.JRE60-PA20 to the latest versionUpdate Jdk60.JDK60-IPF64 to the latest versionUpdate Jdk60.JDK60-PA20W to the latest versionUpdate Jre60.JRE60-PA20W-HS to the latest versionUpdate Jre60.JRE60-PA20-HS to the latest versionUpdate Jre60.JRE60-COM to the latest versionUpdate Jdk60.JDK60-PA20 to the latest versionUpdate Jre60.JRE60-PWV2-H to the latest versionUpdate Jdk60.JDK60-IPF32 to the latest versionUpdate Jre60.JRE60-PA20W to the latest versionUpdate Jdk60.JDK60-PNV2 to the latest versionUpdate Jre60.JRE60-COM-DOC to the latest versionUpdate Jdk60.JDK60-PWV2 to the latest versionUpdate Jdk60.JDK60-COM to the latest versionUpdate Jre60.JRE60-PNV2 to the latest versionUpdate Jre60.JRE60-IPF64 to the latest version | Aug 11, 2017 | Jan 15, 2014 |
| Ibm Aix | — | Apply the fix or workaround for java_jan2014_advisory | Nov 30, 2017 | Jan 15, 2014 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Jan 14, 2014 | Jan 14, 2014 |
| Oracle_linux | — | Upgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdk-demoUpgrade java-1.7.0-openjdk-develUpgrade java-1.6.0-openjdkUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.7.0-openjdk-demoUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.7.0-openjdkUpgrade java-1.7.0-openjdk-src | Oct 16, 2024 | Jan 15, 2014 |
| Suse | — | Upgrade java-1_6_0-ibm-alsa-32bitUpgrade java-1_5_0-ibm-develUpgrade java-1_6_0-ibm-plugin-32bitUpgrade java-1_7_0-openjdk-javadocUpgrade java-1_5_0-ibm-jdbcUpgrade java-1_5_0-ibm-alsa-32bitUpgrade java-1_5_0-ibm-alsaUpgrade java-1_6_0-ibm-pluginUpgrade java-1_7_0-ibm-alsaUpgrade java-1_7_0-openjdk-srcUpgrade java-1_5_0-ibmUpgrade java-1_6_0-ibm-fontsUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_6_0-ibm-32bitUpgrade java-1_7_0-openjdk-develUpgrade java-1_6_0-ibm-alsaUpgrade java-1_6_0-ibm-develUpgrade java-1_6_0-ibm-devel-32bitUpgrade java-1_7_0-openjdkUpgrade java-1_7_0-ibmUpgrade java-1_7_0-ibm-jdbcUpgrade java-1_7_0-openjdk-accessibilityUpgrade java-1_5_0-ibm-devel-32bitUpgrade java-1_7_0-ibm-pluginUpgrade java-1_7_0-openjdk-demoUpgrade java-1_5_0-ibm-fontsUpgrade java-1_7_0-ibm-develUpgrade sle-sdk-releaseUpgrade java-1_7_0-openjdk-headlessUpgrade java-1_5_0-ibm-pluginUpgrade java-1_5_0-ibm-32bitUpgrade java-1_6_0-ibm | Feb 3, 2014 | Jan 15, 2014 |
| Ubuntu | — | Upgrade icedtea-6-jre-jamvmUpgrade icedtea-6-jre-cacaoUpgrade openjdk-7-jre-libUpgrade openjdk-7-jreUpgrade openjdk-6-jre-zeroUpgrade openjdk-7-jre-zeroUpgrade openjdk-6-jre-libUpgrade openjdk-7-jre-headlessUpgrade icedtea-7-jre-jamvmUpgrade icedtea-7-jre-cacaoUpgrade openjdk-6-jreUpgrade openjdk-6-jre-headless | Nov 8, 2024 | Jan 15, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub