{
  "cves": [
    "CVE-2015-4732",
    "CVE-2015-2590",
    "CVE-2015-2601",
    "CVE-2015-2625",
    "CVE-2015-4749",
    "CVE-2015-2628",
    "CVE-2015-4760",
    "CVE-2015-4731",
    "CVE-2015-2808",
    "CVE-2015-4748",
    "CVE-2015-2632",
    "CVE-2015-4000",
    "CVE-2015-2621",
    "CVE-2015-4733"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[1:1.7.0.85-2.6.1.3.0.1]\n- Add oracle-enterprise.patch\n- Fix DISTRO_NAME to 'Oracle Linux'\n\n[1:1.7.0.85-2.6.1.3]\n- Check return value of gio_init in gsettings_init and return false if necessary.\n- Re-enable the use of system GConf.\n- Only ifdef g_type_initg_free if USE_SYSTEM_GIO and USE_SYSTEM_GCONF are undefined.\n- Resolves: rhbz#1242587\n\n[1:1.7.0.85-2.6.1.2]\n- Turn off system GConf as library seems buggy on RHEL 5.11\n- Resolves: rhbz#1235155\n\n[1:1.7.0.85-2.6.1.1]\n- Bump upstream tarball to u25b01 to fix issue with 8075374 backport.\n- Resolves: rhbz#1235155\n\n[1:1.7.0.85-2.6.1.0]\n- Remove upstream PR2503 fix.\n- Resolves: rhbz#1235155\n\n[1:1.7.0.85-2.6.1.0]\n- Update OpenJDK tarball so correct version is used.\n- Resolves: rhbz#1235155\n\n[1:1.7.0.85-2.6.1.0]\n- Bump to 2.6.1 and u85b00.\n- Resolves: rhbz#1235155\n\n[1:1.7.0.80-2.6.0.0]\n- The RHEL 5 version of libsctp is too old for the OpenJDK SCTP implementation.\n- Resolves: rhbz#1235155\n\n[1:1.7.0.80-2.6.0.0]\n- Backport PR2503 to allow build to proceed without GIO being present.\n- Resolves: rhbz#1235155\n\n[1:1.7.0.80-2.6.0.0]\n- Revert move to redhat-lsb-core as unavailable on RHEL 5.11.\n- Resolves: rhbz#1235155\n\n[1:1.7.0.80-2.6.0.0]\n- Remove libxslt and mercurial dependencies pulled in from IcedTea builds.\n- Reduce redhat-lsb dependency to redhat-lsb-core (lsb_release)\n- Resolves: rhbz#1235155\n\n[1:1.7.0.80-2.6.0.0]\n- Revert addition of LCMS removal as RHEL  7 does not have LCMS 2.\n- Resolves: rhbz#1235155\n\n[1:1.7.0.80-2.6.0.0]\n- Bump to 2.6.0 and u80b32.\n- Drop upstreamed patches and separate AArch64 HotSpot.\n- Add dependencies on pcsc-lite-devel (PR2496) and lksctp-tools-devel (PR2446)\n- Add dependency on GConf2-devel (PR2320)\n- Only run -Xshare:dump on JIT archs other than power64 as port lacks support\n- Update remove-intree-libraries script to cover LCMS and PCSC headers and SunEC.\n- Resolves: rhbz#1235155",
  "id": "ELSA-2015-1230",
  "ovalId": "oval:com.oracle.elsa:def:20151230",
  "source": "oracle_linux",
  "title": "ELSA-2015-1230:  java-1.7.0-openjdk security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2015-1230.html"
}