CVE-2014-4263
Published: 17 July 2014
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to "Diffie-Hellman key agreement."
Notes
| Author | Note |
|---|---|
| mdeslaur | in lucid+, NetX and the plugin moved to the icedtea-web package |
| jdstrand | sun-java6 is not redistributable, no longer in the archive and no longer tracked sun-java5 is EOL upstream and no longer tracked |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
openjdk-6 Launchpad, Ubuntu, Debian |
lucid |
Released
(6b32-1.13.4-1ubuntu1~0.10.04.1)
|
| precise |
Released
(6b32-1.13.4-1ubuntu1~0.12.04.1)
|
|
| trusty |
Does not exist
(trusty was released [6b32-1.13.4-4ubuntu0.14.04.1])
|
|
| upstream |
Needs triage
|
|
|
openjdk-6b18 Launchpad, Ubuntu, Debian |
lucid |
Ignored
(reached end-of-life)
|
| precise |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Needs triage
|
|
|
openjdk-7 Launchpad, Ubuntu, Debian |
lucid |
Does not exist
|
| precise |
Released
(7u65-2.5.1-4ubuntu1~0.12.04.1)
|
|
| trusty |
Does not exist
(trusty was released [7u65-2.5.1-1ubuntu1~0.14.04.1])
|
|
| upstream |
Needs triage
|