elsa-2013-0602
oracle_linux[1.7.0.9-2.3.8.0.0.1.el6_4] - Update DISTRO_NAME in specfile [1.7.0.9-2.3.8.0el6] - Revert to rhel 6.3 version of spec file - Revert to icedtea7 2.3.8 forest - Resolves: rhbz#917183 [1.7.0.11-2.4.0.pre5.el6] - Update to latest snapshot of icedtea7 2.4 forest - Resolves: rhbz#917183 [1.7.0.9-2.4.0.pre4.3.el6] - Updated to icedtea 2.4.0.pre4, - Rewritten (again) patch3 java-1.7.0-openjdk-java-access-bridge-security.patch - Resolves: rhbz#911530 [1.7.0.9-2.4.0.pre3.3.el6] - Updated to icedtea 2.4.0.pre3, updated! - Rewritten patch3 java-1.7.0-openjdk-java-access-bridge-security.patch - Resolves: rhbz#911530 [1.7.0.9-2.4.0.pre2.3.el6] - Removed testing - mauve was outdated and - jtreg was icedtea relict - Updated to icedtea 2.4.0.pre2, updated? - Added java -Xshare:dump to post (see 513605) fo jitarchs - Resolves: rhbz#911530 [1.7.0.11-2.4.0.2.el6] - Unapplied but kept (for 2.3revert) patch110, java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch - Added and applied patch113: java-1.7.0-openjdk-aes-update_reset.patch - Added and applied patch114: java-1.7.0-openjdk-nss-tck.patch - Added and applied patch115: java-1.7.0-openjdk-nss-split_results.patch - NSS enabled by default - enable_nss set to 1 - rewritten patch109 - java-1.7.0-openjdk-nss-config-1.patch - rewritten patch111 - java-1.7.0-openjdk-nss-config-2.patch - Resolves: rhbz#831734 [1.7.0.11-2.4.0.1.el6] - Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch - Added jxmd and idlj to alternatives - make executed with DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true - Unapplied patch302 and deleted systemtap.patch - buildver increased to 11 - icedtea_version set to 2.4.0 - Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch - removed tmp-patches source tarball - Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar - Disabled nss - enable_nss set to 0 - Resolves: rhbz#895034
- Published
- unknown
- Last Modified
- unknown
CVSS details not available.
No product information available.
No references available.
No linked vulnerabilities found.
{
"cves": [
"CVE-2013-0809",
"CVE-2013-1493"
],
"cvss": 0.0,
"database_specific": {
"severity": "CRITICAL"
},
"description": "[1.7.0.9-2.3.8.0.0.1.el6_4]\n- Update DISTRO_NAME in specfile\n\n[1.7.0.9-2.3.8.0el6]\n- Revert to rhel 6.3 version of spec file\n- Revert to icedtea7 2.3.8 forest\n- Resolves: rhbz#917183\n\n[1.7.0.11-2.4.0.pre5.el6]\n- Update to latest snapshot of icedtea7 2.4 forest\n- Resolves: rhbz#917183\n\n[1.7.0.9-2.4.0.pre4.3.el6]\n- Updated to icedtea 2.4.0.pre4,\n- Rewritten (again) patch3 java-1.7.0-openjdk-java-access-bridge-security.patch\n- Resolves: rhbz#911530\n\n[1.7.0.9-2.4.0.pre3.3.el6]\n- Updated to icedtea 2.4.0.pre3, updated!\n- Rewritten patch3 java-1.7.0-openjdk-java-access-bridge-security.patch\n- Resolves: rhbz#911530\n\n[1.7.0.9-2.4.0.pre2.3.el6]\n- Removed testing\n - mauve was outdated and\n - jtreg was icedtea relict\n- Updated to icedtea 2.4.0.pre2, updated?\n- Added java -Xshare:dump to post (see 513605) fo jitarchs\n- Resolves: rhbz#911530\n\n[1.7.0.11-2.4.0.2.el6]\n- Unapplied but kept (for 2.3revert) patch110, java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch\n- Added and applied patch113: java-1.7.0-openjdk-aes-update_reset.patch\n- Added and applied patch114: java-1.7.0-openjdk-nss-tck.patch\n- Added and applied patch115: java-1.7.0-openjdk-nss-split_results.patch\n- NSS enabled by default - enable_nss set to 1\n- rewritten patch109 - java-1.7.0-openjdk-nss-config-1.patch\n- rewritten patch111 - java-1.7.0-openjdk-nss-config-2.patch\n- Resolves: rhbz#831734\n\n[1.7.0.11-2.4.0.1.el6]\n- Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch\n- Added jxmd and idlj to alternatives\n- make executed with DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true\n- Unapplied patch302 and deleted systemtap.patch\n- buildver increased to 11\n- icedtea_version set to 2.4.0\n- Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch\n- removed tmp-patches source tarball\n- Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar\n- Disabled nss - enable_nss set to 0\n- Resolves: rhbz#895034",
"id": "ELSA-2013-0602",
"ovalId": "oval:com.oracle.elsa:def:20130602",
"source": "oracle_linux",
"title": "ELSA-2013-0602: java-1.7.0-openjdk security update (CRITICAL)",
"url": "https://linux.oracle.com/errata/ELSA-2013-0602.html"
}