(RHSA-2016:1504) Important: java-1.7.0-openjdk security update

2016-07-2700:00:00

access.redhat.com

0.016 Low

EPSS

Percentile

87.5%

JSON

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment
and the OpenJDK 7 Java Software Development Kit.

Security Fix(es):

Multiple flaws were discovered in the Hotspot and Libraries components in
OpenJDK. An untrusted Java application or applet could use these flaws to
completely bypass Java sandbox restrictions. (CVE-2016-3606, CVE-2016-3598,
CVE-2016-3610)
Multiple denial of service flaws were found in the JAXP component in OpenJDK.
A specially crafted XML file could cause a Java application using JAXP to
consume an excessive amount of CPU and memory when parsed. (CVE-2016-3500,
CVE-2016-3508)
Multiple flaws were found in the CORBA and Hotsport components in OpenJDK. An
untrusted Java application or applet could use these flaws to bypass certain
Java sandbox restrictions. (CVE-2016-3458, CVE-2016-3550)

OSVersionArchitecturePackageVersionFilename
RedHat7x86_64java-1.7.0-openjdk-devel< 1.7.0.111-2.6.7.2.el7_2java-1.7.0-openjdk-devel-1.7.0.111-2.6.7.2.el7_2.x86_64.rpm
RedHat7s390xjava-1.7.0-openjdk-accessibility< 1.7.0.111-2.6.7.2.el7_2java-1.7.0-openjdk-accessibility-1.7.0.111-2.6.7.2.el7_2.s390x.rpm
RedHat7s390xjava-1.7.0-openjdk-devel< 1.7.0.111-2.6.7.2.el7_2java-1.7.0-openjdk-devel-1.7.0.111-2.6.7.2.el7_2.s390x.rpm
RedHat7ppc64lejava-1.7.0-openjdk-src< 1.7.0.111-2.6.7.2.el7_2java-1.7.0-openjdk-src-1.7.0.111-2.6.7.2.el7_2.ppc64le.rpm
RedHat7x86_64java-1.7.0-openjdk< 1.7.0.111-2.6.7.2.el7_2java-1.7.0-openjdk-1.7.0.111-2.6.7.2.el7_2.x86_64.rpm
RedHat7ppc64java-1.7.0-openjdk-demo< 1.7.0.111-2.6.7.2.el7_2java-1.7.0-openjdk-demo-1.7.0.111-2.6.7.2.el7_2.ppc64.rpm
RedHat6i686java-1.7.0-openjdk< 1.7.0.111-2.6.7.2.el6_8java-1.7.0-openjdk-1.7.0.111-2.6.7.2.el6_8.i686.rpm
RedHat7ppc64java-1.7.0-openjdk-debuginfo< 1.7.0.111-2.6.7.2.el7_2java-1.7.0-openjdk-debuginfo-1.7.0.111-2.6.7.2.el7_2.ppc64.rpm
RedHat6noarchjava-1.7.0-openjdk-javadoc< 1.7.0.111-2.6.7.2.el6_8java-1.7.0-openjdk-javadoc-1.7.0.111-2.6.7.2.el6_8.noarch.rpm
RedHat6srcjava-1.7.0-openjdk< 1.7.0.111-2.6.7.2.el6_8java-1.7.0-openjdk-1.7.0.111-2.6.7.2.el6_8.src.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	7	x86_64	java-1.7.0-openjdk-devel	< 1.7.0.111-2.6.7.2.el7_2	java-1.7.0-openjdk-devel-1.7.0.111-2.6.7.2.el7_2.x86_64.rpm
RedHat	7	s390x	java-1.7.0-openjdk-accessibility	< 1.7.0.111-2.6.7.2.el7_2	java-1.7.0-openjdk-accessibility-1.7.0.111-2.6.7.2.el7_2.s390x.rpm
RedHat	7	s390x	java-1.7.0-openjdk-devel	< 1.7.0.111-2.6.7.2.el7_2	java-1.7.0-openjdk-devel-1.7.0.111-2.6.7.2.el7_2.s390x.rpm
RedHat	7	ppc64le	java-1.7.0-openjdk-src	< 1.7.0.111-2.6.7.2.el7_2	java-1.7.0-openjdk-src-1.7.0.111-2.6.7.2.el7_2.ppc64le.rpm
RedHat	7	x86_64	java-1.7.0-openjdk	< 1.7.0.111-2.6.7.2.el7_2	java-1.7.0-openjdk-1.7.0.111-2.6.7.2.el7_2.x86_64.rpm
RedHat	7	ppc64	java-1.7.0-openjdk-demo	< 1.7.0.111-2.6.7.2.el7_2	java-1.7.0-openjdk-demo-1.7.0.111-2.6.7.2.el7_2.ppc64.rpm
RedHat	6	i686	java-1.7.0-openjdk	< 1.7.0.111-2.6.7.2.el6_8	java-1.7.0-openjdk-1.7.0.111-2.6.7.2.el6_8.i686.rpm
RedHat	7	ppc64	java-1.7.0-openjdk-debuginfo	< 1.7.0.111-2.6.7.2.el7_2	java-1.7.0-openjdk-debuginfo-1.7.0.111-2.6.7.2.el7_2.ppc64.rpm
RedHat	6	noarch	java-1.7.0-openjdk-javadoc	< 1.7.0.111-2.6.7.2.el6_8	java-1.7.0-openjdk-javadoc-1.7.0.111-2.6.7.2.el6_8.noarch.rpm
RedHat	6	src	java-1.7.0-openjdk	< 1.7.0.111-2.6.7.2.el6_8	java-1.7.0-openjdk-1.7.0.111-2.6.7.2.el6_8.src.rpm