Oval Definition:	oval:org.mitre.oval:def:22049
Revision Date: 2014-06-30 Version: 193 Title: RHSA-2014:0027: java-1.7.0-openjdk security update (Important) Description: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to "insufficient security checks in IIOP streams," which allows attackers to escape the sandbox. Family: unix Class: patch Status: ACCEPTED Reference(s): CESA-2014:0027 CVE-2013-5878 CVE-2013-5884 CVE-2013-5893 CVE-2013-5896 CVE-2013-5907 CVE-2013-5910 CVE-2014-0368 CVE-2014-0373 CVE-2014-0376 CVE-2014-0411 CVE-2014-0416 CVE-2014-0422 CVE-2014-0423 CVE-2014-0428 RHSA-2014:0027-00 Platform(s): CentOS Linux 5 Red Hat Enterprise Linux 5 Product(s): java-1.7.0-openjdk Definition Synopsis Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 OR The operating system installed on the system is CentOS Linux 5.x AND Packages section java-1.7.0-openjdk is earlier than 1:1.7.0.51-2.4.4.1.el5_10 OR java-1.7.0-openjdk-src is earlier than 1:1.7.0.51-2.4.4.1.el5_10 OR java-1.7.0-openjdk-javadoc is earlier than 1:1.7.0.51-2.4.4.1.el5_10 OR java-1.7.0-openjdk-demo is earlier than 1:1.7.0.51-2.4.4.1.el5_10 OR java-1.7.0-openjdk-devel is earlier than 1:1.7.0.51-2.4.4.1.el5_10
BACK