• Close
  • Back to search

    RHSA-2013:0165: java-1.7.0-openjdk security update

    Severity CVSS Published Added Modified
    10 (AV:N/AC:L/Au:N/C:C/I:C/A:C) January 09, 2013 January 17, 2013 September 06, 2015

    Available Exploits 

    Description

    These packages provide the OpenJDK 7 Java Runtime Environment and theOpenJDK 7 Software Development Kit.Two improper permission check issues were discovered in the reflection APIin OpenJDK. An untrusted Java application or applet could use these flawsto bypass Java sandbox restrictions. (CVE-2012-3174, CVE-2013-0422)This erratum also upgrades the OpenJDK package to IcedTea7 2.3.4. Refer tothe NEWS file, linked to in the References, for further information.All users of java-1.7.0-openjdk are advised to upgrade to these updatedpackages, which resolve these issues. All running instances of OpenJDK Javamust be restarted for the update to take effect.

    Free Nexpose Download

    Discover, prioritize, and remediate security risks today!

     Download now

    References

    Solution

    linuxrpm-upgrade-rhel50-ix86-java-1.7.0-openjdk

    Related Vulnerabilities