{"cves":["CVE-2012-0547","CVE-2012-3136","CVE-2012-1682","CVE-2012-4681"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[1.7.0.5-2.2.1.0.1.el6_3.3]\n- Modify DISTRO_NAME for Oracle\n\n[1.7.0.5-2.2.1.el6.3]\n- Removed patch 304 java-1.7.0-openjdk-beans-isPackageAccessible.patch\n- Applied upstream patches for same issue:\n   patch 1001 sec-webrevs-openjdk7-29_aug_2012-7162473.patch\n   patch 1002 sec-webrevs-openjdk7-29_aug_2012-7162476.patch\n   patch 1003 sec-webrevs-openjdk7-29_aug_2012-7163201.patch\n   patch 1004 sec-webrevs-openjdk7-29_aug_2012-7194567.patch\n   patch 1005 sec-webrevs-openjdk7-29_aug_2012-78e01a6ca8d3.patch\n- Resolves: rhbz#852299\n\n[1.7.0.5-2.2.1.1.el6]\n- Added patch 304 java-1.7.0-openjdk-beans-isPackageAccessible.patch\n  to fix vulnerability until it is fixed in upstream sources. \n- Resolves: rhbz#852299","id":"ELSA-2012-1223","ovalId":"oval:com.oracle.elsa:def:20121223","source":"oracle_linux","title":"ELSA-2012-1223:  java-1.7.0-openjdk security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2012-1223.html"}