OpenJDK-7 Security Update
Summary
DSA-3235-1: openjdk-7 - security update. Affects openjdk-7 versions < 7u79-2.5.5-1~deb7u1. Fixed in 7u79-2.5.5-1~deb7u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenJDK is an open-source implementation of the Oracle Java platform. It provides a runtime environment for executing Java applications. OpenJDK-7 is the version specifically affected by this security update.
Vulnerability Detail
Multiple vulnerabilities have been discovered in OpenJDK-7. These vulnerabilities can lead to the execution of arbitrary code, breakouts of the Java sandbox, information disclosure, or denial of service attacks. The specific vulnerabilities are identified by the following CVE numbers: CVE-2014-8873, CVE-2015-0460, CVE-2015-0469, CVE-2015-0470, CVE-2015-0477, CVE-2015-0478, CVE-2015-0480, and CVE-2015-0488.
How To Fix
Minimum fixed version
7u79-2.5.5-1~deb7u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade openjdk-7Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
OpenJDK-7 has multiple vulnerabilities that can be exploited to execute arbitrary code, break out of the Java sandbox, disclose information, or cause denial of service. It is recommended to upgrade to the fixed versions mentioned in the 'how_to_fix' section. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for openjdk-7 →
FAQ
OpenJDK is an open-source implementation of the Oracle Java platform. It provides a runtime environment for executing Java applications.
Only OpenJDK-7 is affected by these vulnerabilities.
These vulnerabilities can lead to the execution of arbitrary code, breakouts of the Java sandbox, information disclosure, or denial of service attacks.
To fix these vulnerabilities, it is recommended to upgrade your openjdk-7 packages to the fixed versions mentioned in the 'how_to_fix' section.
You can find more information about these vulnerabilities in the Debian Security Advisory DSA-3235-1. The link to the advisory is provided in the 'affected' section of the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for openjdk-7.
