{"cves":["CVE-2013-0809","CVE-2013-1493"],"cvss":0.0,"database_specific":{"severity":"CRITICAL"},"description":"[1.7.0.9-2.3.8.0.0.1.el6_4]\n- Update DISTRO_NAME in specfile\n\n[1.7.0.9-2.3.8.0el6]\n- Revert to rhel 6.3 version of spec file\n- Revert to icedtea7 2.3.8 forest\n- Resolves: rhbz#917183\n\n[1.7.0.11-2.4.0.pre5.el6]\n- Update to latest snapshot of icedtea7 2.4 forest\n- Resolves: rhbz#917183\n\n[1.7.0.9-2.4.0.pre4.3.el6]\n- Updated  to icedtea 2.4.0.pre4,\n- Rewritten (again) patch3 java-1.7.0-openjdk-java-access-bridge-security.patch\n- Resolves: rhbz#911530\n\n[1.7.0.9-2.4.0.pre3.3.el6]\n- Updated  to icedtea 2.4.0.pre3, updated!\n- Rewritten patch3 java-1.7.0-openjdk-java-access-bridge-security.patch\n- Resolves: rhbz#911530\n\n[1.7.0.9-2.4.0.pre2.3.el6]\n- Removed testing\n - mauve was outdated and\n - jtreg was icedtea relict\n- Updated  to icedtea 2.4.0.pre2, updated?\n- Added java -Xshare:dump to post (see 513605) fo jitarchs\n- Resolves: rhbz#911530\n\n[1.7.0.11-2.4.0.2.el6]\n- Unapplied but kept (for 2.3revert) patch110,  java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch\n- Added and applied patch113: java-1.7.0-openjdk-aes-update_reset.patch\n- Added and applied patch114: java-1.7.0-openjdk-nss-tck.patch\n- Added and applied patch115: java-1.7.0-openjdk-nss-split_results.patch\n- NSS enabled by default - enable_nss set to 1\n- rewritten patch109 - java-1.7.0-openjdk-nss-config-1.patch\n- rewritten patch111 - java-1.7.0-openjdk-nss-config-2.patch\n- Resolves: rhbz#831734\n\n[1.7.0.11-2.4.0.1.el6]\n- Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch\n- Added jxmd and idlj to alternatives\n- make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true\n- Unapplied patch302 and deleted systemtap.patch\n- buildver increased to 11\n- icedtea_version set to 2.4.0\n- Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch\n- removed tmp-patches source tarball\n- Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar\n- Disabled nss - enable_nss set to 0\n- Resolves: rhbz#895034","id":"ELSA-2013-0602","ovalId":"oval:com.oracle.elsa:def:20130602","source":"oracle_linux","title":"ELSA-2013-0602:  java-1.7.0-openjdk security update (CRITICAL)","url":"https://linux.oracle.com/errata/ELSA-2013-0602.html"}