• Close
  • Back to search

    CESA-2013:0165: java-1.7.0-openjdk security update

    Severity CVSS Published Added Modified
    10 (AV:N/AC:L/Au:N/C:C/I:C/A:C) January 09, 2013 January 17, 2013 November 26, 2015

    Available Exploits 


    These packages provide the OpenJDK 7 Java Runtime Environment and theOpenJDK 7 Software Development Kit.Two improper permission check issues were discovered in the reflection APIin OpenJDK. An untrusted Java application or applet could use these flawsto bypass Java sandbox restrictions. (CVE-2012-3174, CVE-2013-0422)This erratum also upgrades the OpenJDK package to IcedTea7 2.3.4. Refer tothe NEWS file, linked to in the References, for further information.All users of java-1.7.0-openjdk are advised to upgrade to these updatedpackages, which resolve these issues. All running instances of OpenJDK Javamust be restarted for the update to take effect.

    Free Nexpose Download

    Discover, prioritize, and remediate security risks today!

     Download now




    Related Vulnerabilities