First published: Mon Apr 20 2015(Updated: )
Oracle Java SE version 7 includes the Oracle Java Runtime Environment and<br>the Oracle Java Software Development Kit.<br>This update fixes several vulnerabilities in the Oracle Java Runtime<br>Environment and the Oracle Java Software Development Kit. Further<br>information about these flaws can be found on the Oracle Java SE Critical<br>Patch Update Advisory page, listed in the References section.<br>(CVE-2005-1080, CVE-2015-0458, CVE-2015-0459, CVE-2015-0460, CVE-2015-0469,<br>CVE-2015-0477, CVE-2015-0478, CVE-2015-0480, CVE-2015-0484, CVE-2015-0488,<br>CVE-2015-0491, CVE-2015-0492)<br>The CVE-2015-0478 issue was discovered by Florian Weimer of Red Hat<br>Product Security.<br>All users of java-1.7.0-oracle are advised to upgrade to these updated<br>packages, which provide Oracle Java 7 Update 79 and resolve these issues.<br>All running instances of Oracle Java must be restarted for the update to<br>take effect.
Affected Software | Affected Version | How to fix |
---|---|---|
Sun Java SE | <7 Update 79 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
RHSA-2015:0857 has been classified as a critical vulnerability.
To fix RHSA-2015:0857, update your Oracle Java SE to the latest version provided by the vendor.
RHSA-2015:0857 addresses multiple vulnerabilities in the Oracle Java Runtime Environment and Oracle Java Software Development Kit.
RHSA-2015:0857 affects Oracle Java SE version 7.
There are no official workarounds for RHSA-2015:0857; the recommended action is to apply the update.