Bug 867192 (CVE-2012-5067)

Summary:	CVE-2012-5067 Oracle JDK: unspecified vulnerability (Deployment)
Product:	[Other] Security Response	Reporter:	Vincent Danen <vdanen>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	jvanek
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-11-16 08:37:54 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	862579

Description Vincent Danen 2012-10-17 02:33:49 UTC

Common Vulnerabilities and Exposures assigned an identifier CVE-2012-5067 to
the following vulnerability:

Name: CVE-2012-5067
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5067
Assigned: 20120922
Reference: http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html

Unspecified vulnerability in the Java Runtime Environment (JRE)
component in Oracle Java SE 7 Update 7 and earlier allows remote
attackers to affect confidentiality via unknown vectors related to
Deployment.

Comment 1 Tomas Hoger 2012-10-17 10:17:28 UTC

Fixed now in Oracle JDK 7u9.

External Reference:

http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html

Comment 2 errata-xmlrpc 2012-10-18 16:46:54 UTC

This issue has been addressed in following products:

  Supplementary for Red Hat Enterprise Linux 6

Via RHSA-2012:1391 https://rhn.redhat.com/errata/RHSA-2012-1391.html

Comment 3 errata-xmlrpc 2012-11-15 21:09:43 UTC

This issue has been addressed in following products:

  Supplementary for Red Hat Enterprise Linux 6

Via RHSA-2012:1467 https://rhn.redhat.com/errata/RHSA-2012-1467.html