It was discovered that the CipherInputStream class implementation did not properly handle certain exceptions. This issue could possibly allow attacker to affect integrity of the encrypted stream handled using this class.
It was discovered that the StAX XML parser in the JAXP (Java API for XML Processing) component of OpenJDK failed to properly honor setting indicating (defined using isSupportingExternalEntities / ISSUPPORTINGEXTERNALENTITIES property) whether external XML entities should be processed. External parameter entities were processed even when the StAX parser was configured to not process external entities. An attacker able to provide a specially-crafted XML file to an application using StAX parser could use this flaw to perform XML eXternal Entity (XXE) attack.
It was discovered that DatagramSocket implementation in OpenJDK did not perform any packet source address checks for packets received on connected socket. This could cause an application using DatagramSocket to read a packet from the socket that originates from a different source to the one to which the socket was connected. This problem is caused by BSD socket API oddity, which returns packets form different source if they were queued before socket was connected.
This issue can make it easier to perform IP spoofing attacks, as it may allow packets to be processed by an application without packets actually having spoofed source address. It can also lead to limited security manager restrictions bypass.
http://docs.oracle.com/javase/7/docs/api/java/net/DatagramSocket.html
Acknowledgement:
This issue was discovered by Florian Weimer of Red Hat Product Security.
It was discovered that the TLS/SSL implementation in the JSSE component of OpenJDK was vulnerable to the Triple Handshake attack. An insufficient check of server's identity during the renegotiation following session resumption could allow a malicious server to manipulate clients authenticated session with a different server if client certificate authentication was used.
Further details of the attacks are described on:
https://secure-resumption.com/