[ GLSA 201507-14 ] Oracle JRE/JDK

[GLSA]

Gentoo Linux Security Advisory

Title: Oracle JRE/JDK: Multiple vulnerabilities (GLSA 201507-14)
Severity: normal
Exploitable: local, remote
Date: July 10, 2015
Updated: July 11, 2015
Bug(s): #537214
ID: 201507-14

Synopsis

Multiple vulnerabilities have been found in Oracle JRE/JDK,
allowing both local and remote attackers to compromise various Java
components.


Background

The Oracle Java Development Kit (JDK) and the Oracle Java Runtime
Environment (JRE) provide the Oracle Java platform.


Affected Packages

Package: dev-java/oracle-jre-bin
Vulnerable: < 1.8.0.31
Vulnerable: < 1.7.0.76
Unaffected: >= 1.8.0.31
Unaffected: >= 1.7.0.76
Architectures: All supported architectures

Package: dev-java/oracle-jdk-bin
Vulnerable: < 1.8.0.31
Vulnerable: < 1.7.0.76
Unaffected: >= 1.8.0.31
Unaffected: >= 1.7.0.76
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Oracle JRE/JDK. Please
review the CVE identifiers referenced below for details.


Impact

An context-dependent attacker may be able to influence the
confidentiality, integrity, and availability of Java
applications/runtime.


Workaround

There is no workaround at this time.

Resolution

All Oracle JRE 8 users should upgrade to the latest stable version: