RHSA-2014:1880Critical

Red Hat Security Advisory: java-1.7.1-ibm security update

Published
November 20, 2014
Last Modified
June 27, 2026

🔗 CVE IDs covered (19)

CVE-2014-6493 →CVE-2014-6502 →CVE-2014-6527 →CVE-2014-6457 →CVE-2014-6476 →CVE-2014-6503 →CVE-2014-6515 →CVE-2014-6531 →CVE-2014-6458 →CVE-2014-6511 →CVE-2014-6512 →CVE-2014-6558 →CVE-2014-3065 →CVE-2014-6492 →CVE-2014-6506 →CVE-2014-6532 →CVE-2014-3566 →CVE-2014-4288 →CVE-2014-6456 →

📋 Description

CVE-2014-3065 — JDK: privilege escalation via shared class cache CVE-2014-3566 — SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack CVE-2014-4288 — JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment) CVE-2014-6456 — JDK: unspecified vulnerability fixed in 7u71 and 8u25 (Deployment) CVE-2014-6457 — OpenJDK: Triple Handshake attack against TLS/SSL connections (JSSE, 8037066) CVE-2014-6458 — JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment) CVE-2014-6476 — JDK: unspecified vulnerability fixed in 7u71 and 8u25 (Deployment) CVE-2014-6492 — JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment) CVE-2014-6493 — JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment) CVE-2014-6502 — OpenJDK: LogRecord use of incorrect CL when loading ResourceBundle (Libraries, 8042797) CVE-2014-6503 — JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment) CVE-2014-6506 — OpenJDK: insufficient permission checks when setting resource bundle on system logger (Libraries, 8041564) CVE-2014-6511 — ICU: Layout Engine ContextualSubstitution missing boundary checks (JDK 2D, 8041540) CVE-2014-6512 — OpenJDK: DatagramSocket connected socket missing source check (Libraries, 8039509) CVE-2014-6515 — JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment) CVE-2014-6527 — JDK: unspecified vulnerability fixed in 7u71 and 8u25 (Deployment) CVE-2014-6531 — OpenJDK: insufficient ResourceBundle name check (Libraries, 8044274) CVE-2014-6532 — JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment) CVE-2014-6558 — OpenJDK: CipherInputStream incorrect exception handling (Security, 8037846)

🔗 References (24)