Errata overview
Errata ID 33
Date 2015-01-15
Source package openjdk-7
Fixed in version 7u71-2.5.3-2.11.201501120921
Description
Multiple security issues have been fixed in OpenJDK:
 TLS/SSL handshake attack (CVE-2014-6457)
 Insecure logging (CVE-2014-6502)
 Information disclosure in Hotspot (CVE-2014-6504)
 Insufficient permission checks in system logging (CVE-2014-6506)
 Information disclosure in ICU/2D (CVE-2014-6511)
 Missing source checks in datagram sockets (CVE-2014-6512)
 XEE in the Stax parser (CVE-2014-6517)
 Memmory corruption in the JVM (CVE-2014-6519)
 Insufficient name checks for resource bundles (CVE-2014-6531)
 Incorrect exception handling in CipherInputStream (CVE-2014-6558)
Additional notes
CVE ID CVE-2014-6457
CVE-2014-6502
CVE-2014-6504
CVE-2014-6506
CVE-2014-6511
CVE-2014-6512
CVE-2014-6517
CVE-2014-6519
CVE-2014-6531
CVE-2014-6558
UCS Bug number #36985