diff options
| author |   Kristian Fiskerstrand <kf@sumptuouscapital.com> | 2015-07-10 14:49:59 +0200 |
|---|---|---|
| committer | Kristian Fiskerstrand <kf@sumptuouscapital.com> | 2015-07-10 14:49:59 +0200 |
| commit | 9369c368014a98f3cc2b238464d8cdde144b72cb (patch) | |
| tree | 0b7679fab0f419e732d4e3cc661157dd525c0276 /glsa-201507-14.xml | |
| parent | GLSA 201507-13 (diff) | |
| download | glsa-9369c368014a98f3cc2b238464d8cdde144b72cb.tar.gz glsa-9369c368014a98f3cc2b238464d8cdde144b72cb.tar.bz2 glsa-9369c368014a98f3cc2b238464d8cdde144b72cb.zip | |
GLSA 201507-14
Diffstat (limited to 'glsa-201507-14.xml')
| -rw-r--r-- | glsa-201507-14.xml | 136 |
1 files changed, 136 insertions, 0 deletions
diff --git a/glsa-201507-14.xml b/glsa-201507-14.xml new file mode 100644 index 00000000..d2327737 --- /dev/null +++ b/glsa-201507-14.xml @@ -0,0 +1,136 @@ +<?xml version="1.0" encoding="UTF-8"?> +<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd"> +<glsa id="201507-14"> + <title>Oracle JRE/JDK: Multiple vulnerabilities</title> + <synopsis>Multiple vulnerabilities have been found in Oracle JRE/JDK, + allowing both local and remote attackers to compromise various Java + components. + </synopsis> + <product type="ebuild">oracle-jre oracle-jdk</product> + <announced>July 10, 2015</announced> + <revised>July 10, 2015: 1</revised> + <bug>537214</bug> + <access>local, remote</access> + <affected> + <package name="dev-java/oracle-jre-bin" auto="yes" arch="*"> + <unaffected range="ge">1.8.0.31</unaffected> + <unaffected range="ge">1.7.0.76</unaffected> + <vulnerable range="lt">1.8.0.31</vulnerable> + <vulnerable range="lt">1.7.0.76</vulnerable> + </package> + <package name="dev-java/oracle-jdk-bin" auto="yes" arch="*"> + <unaffected range="ge">1.8.0.31</unaffected> + <unaffected range="ge">1.7.0.76</unaffected> + <vulnerable range="lt">1.8.0.31</vulnerable> + <vulnerable range="lt">1.7.0.76</vulnerable> + </package> + </affected> + <background> + <p>Oracle’s Java SE Development Kit and Runtime Environment</p> + </background> + <description> + <p>Multiple vulnerabilities have been discovered in Oracle JRE/JDK. Please + review the CVE identifiers referenced below for details. + </p> + </description> + <impact type="normal"> + <p>An context-dependent attacker may be able to influence the + confidentiality, integrity, and availability of Java + applications/runtime. + </p> + </impact> + <workaround> + <p>There is no workaround at this time.</p> + </workaround> + <resolution> + <p>All Oracle JRE 8 users should upgrade to the latest stable version: + <code> + # emerge --sync + # emerge --ask --oneshot --verbose + ">=dev-java/oracle-jre-bin-1.8.0.31 + </code> + + <p>All Oracle JDK 8 users should upgrade to the latest stable version: + <code> + # emerge --sync + # emerge --ask --oneshot --verbose + ">=dev-java/oracle-jdk-bin-1.8.0.31 + </code> + + <p>All Oracle JRE 7 users should upgrade to the latest version: + <code> + # emerge --sync + # emerge --ask --oneshot --verbose + ">=dev-java/oracle-jre-bin-1.7.0.76 + </code> + + <p>All Oracle JDK 7 users should upgrade to the latest stable + version:<code> + # emerge --sync + # emerge --ask --oneshot --verbose + ">=dev-java/oracle-jdk-bin-1.7.0.76 + </code> + </resolution> + <references> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3566"> + CVE-2014-3566 + </uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-6549"> + CVE-2014-6549 + </uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-6585"> + CVE-2014-6585 + </uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-6587"> + CVE-2014-6587 + </uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-6591"> + CVE-2014-6591 + </uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-6593"> + CVE-2014-6593 + </uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-6601"> + CVE-2014-6601 + </uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0383"> + CVE-2015-0383 + </uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0395"> + CVE-2015-0395 + </uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0400"> + CVE-2015-0400 + </uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0403"> + CVE-2015-0403 + </uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0406"> + CVE-2015-0406 + </uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0407"> + CVE-2015-0407 + </uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0408"> + CVE-2015-0408 + </uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0410"> + CVE-2015-0410 + </uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0412"> + CVE-2015-0412 + </uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0413"> + CVE-2015-0413 + </uri> + <uri link="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-0421"> + CVE-2015-0421 + </uri> + </references> + <metadata tag="requester" timestamp="Thu, 02 Jul 2015 22:00:28 +0000"> + BlueKnight + </metadata> + <metadata tag="submitter" timestamp="Fri, 10 Jul 2015 12:50:45 +0000"> + stanley + </metadata> + </glsa> |