[ GLSA 201502-12 ] Oracle JRE/JDK

[GLSA]

Gentoo Linux Security Advisory

Title: Oracle JRE/JDK: Multiple vulnerabilities (GLSA 201502-12)
Severity: normal
Exploitable: remote
Date: February 15, 2015
Bug(s): #507798, #508716, #517220, #525464
ID: 201502-12

Synopsis

Multiple vulnerabilities have been found in Oracle's Java SE
Development Kit and Runtime Environment, the worst of which could lead to
execution of arbitrary code.


Background

Oracle’s Java SE Development Kit and Runtime Environment

Affected Packages

Package: dev-java/oracle-jre-bin
Vulnerable: < 1.7.0.71
Unaffected: >= 1.7.0.71
Architectures: All supported architectures

Package: dev-java/oracle-jdk-bin
Vulnerable: < 1.7.0.71
Unaffected: >= 1.7.0.71
Architectures: All supported architectures

Package: app-emulation/emul-linux-x86-java
Vulnerable: < 1.7.0.71
Unaffected: >= 1.7.0.71
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Oracle’s Java SE
Development Kit and Runtime Environment. Please review the CVE
identifiers referenced below for details.


Impact

A context-dependent attacker may be able to execute arbitrary code,
disclose, update, insert, or delete certain data.


Workaround

There is no known workaround at this time.

Resolution

All Oracle JRE 1.7 users should upgrade to the latest version: