{
  "cves": [
    "CVE-2013-0809",
    "CVE-2013-1493"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "CRITICAL"
  },
  "description": "[1.7.0.9-2.3.8.0.0.1.el6_4]\n- Update DISTRO_NAME in specfile\n\n[1.7.0.9-2.3.8.0el6]\n- Revert to rhel 6.3 version of spec file\n- Revert to icedtea7 2.3.8 forest\n- Resolves: rhbz#917183\n\n[1.7.0.11-2.4.0.pre5.el6]\n- Update to latest snapshot of icedtea7 2.4 forest\n- Resolves: rhbz#917183\n\n[1.7.0.9-2.4.0.pre4.3.el6]\n- Updated  to icedtea 2.4.0.pre4,\n- Rewritten (again) patch3 java-1.7.0-openjdk-java-access-bridge-security.patch\n- Resolves: rhbz#911530\n\n[1.7.0.9-2.4.0.pre3.3.el6]\n- Updated  to icedtea 2.4.0.pre3, updated!\n- Rewritten patch3 java-1.7.0-openjdk-java-access-bridge-security.patch\n- Resolves: rhbz#911530\n\n[1.7.0.9-2.4.0.pre2.3.el6]\n- Removed testing\n - mauve was outdated and\n - jtreg was icedtea relict\n- Updated  to icedtea 2.4.0.pre2, updated?\n- Added java -Xshare:dump to post (see 513605) fo jitarchs\n- Resolves: rhbz#911530\n\n[1.7.0.11-2.4.0.2.el6]\n- Unapplied but kept (for 2.3revert) patch110,  java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch\n- Added and applied patch113: java-1.7.0-openjdk-aes-update_reset.patch\n- Added and applied patch114: java-1.7.0-openjdk-nss-tck.patch\n- Added and applied patch115: java-1.7.0-openjdk-nss-split_results.patch\n- NSS enabled by default - enable_nss set to 1\n- rewritten patch109 - java-1.7.0-openjdk-nss-config-1.patch\n- rewritten patch111 - java-1.7.0-openjdk-nss-config-2.patch\n- Resolves: rhbz#831734\n\n[1.7.0.11-2.4.0.1.el6]\n- Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch\n- Added jxmd and idlj to alternatives\n- make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true\n- Unapplied patch302 and deleted systemtap.patch\n- buildver increased to 11\n- icedtea_version set to 2.4.0\n- Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch\n- removed tmp-patches source tarball\n- Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar\n- Disabled nss - enable_nss set to 0\n- Resolves: rhbz#895034",
  "id": "ELSA-2013-0602",
  "ovalId": "oval:com.oracle.elsa:def:20130602",
  "source": "oracle_linux",
  "title": "ELSA-2013-0602:  java-1.7.0-openjdk security update (CRITICAL)",
  "url": "https://linux.oracle.com/errata/ELSA-2013-0602.html"
}