Red Hat Security Advisory

RHSA-2010:0865

java-1.6.0-openjdk security and bug fix update

Released 2010-11-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0
Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0 +2
Red Hat Enterprise Linux HPC Node (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0
Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0 +2
Red Hat Enterprise Linux Server (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0
Red Hat Enterprise Linux Server Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0
Red Hat Enterprise Linux Workstation (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0
Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0, java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0

Fixes 17 records

TI-2009-03392 CVE-2009-3555 · GHSA-f7w7-6pjc-wwm6

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft…

CRITICAL 91

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.87264 Published 2009-11-09 Fixed in 7.0.10, 6.0.32 +1 CWE-300

TI-2010-03398 CVE-2010-3569 · GHSA-gxmw-9pmp-92hq

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and avail…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07099 Published 2010-10-19 Fixed

TI-2010-03391 CVE-2010-3562 · GHSA-7242-cf77-68qm

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6…

MEDIUM 53

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07099 Published 2010-10-19 Fixed

TI-2010-03403 CVE-2010-3574 · GHSA-6gvj-cjgc-qxmv

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

MEDIUM 51

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availabil…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.049 Published 2010-10-19 Fixed

TI-2010-03397 CVE-2010-3568 · GHSA-jmxm-vpv4-jjr2

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and…

MEDIUM 51

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.049 Published 2010-10-19 Fixed

TI-2010-03396 CVE-2010-3567 · GHSA-4mq8-fgx6-fqpv

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6…

MEDIUM 51

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.049 Published 2010-10-19 Fixed

TI-2010-03394 CVE-2010-3565 · GHSA-h9j4-m2pf-hmrh

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6…

MEDIUM 51

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown ve…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05616 Published 2010-10-19 Fixed

TI-2010-03383 CVE-2010-3554 · GHSA-hw7f-56q4-38gg

Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business…

MEDIUM 51

Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability v…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.049 Published 2010-10-19 Fixed

TI-2010-03382 CVE-2010-3553 · GHSA-2v8j-qh76-qvv8

Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business…

MEDIUM 51

Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability v…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.049 Published 2010-10-19 Fixed

TI-2010-03390 CVE-2010-3561 · GHSA-jmhr-w45r-wv9q

Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business…

LOW 39

Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03356 Published 2010-10-19 Fixed

TI-2010-03402 CVE-2010-3573 · GHSA-hv45-8vp2-m2c8

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

LOW 36

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vecto…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.10557 Published 2010-10-19 Fixed

TI-2010-03378 CVE-2010-3549 · GHSA-jf8h-wqmh-2m6x

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

LOW 36

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03337 Published 2010-10-19 Fixed

TI-2010-03393 CVE-2010-3564 · GHSA-vgp7-8r7h-qwg6

Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System…

LOW 35

Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via un…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.04093 Published 2010-10-14 Fixed

TI-2010-03386 CVE-2010-3557 · GHSA-6jxx-vp42-6rcv

Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business…

LOW 35

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02879 Published 2010-10-19 Fixed

TI-2010-03371 CVE-2010-3541 · GHSA-wp5h-xwhh-9fw3

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

LOW 29

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.03102 Published 2010-10-19 Fixed

TI-2010-03380 CVE-2010-3551 · GHSA-m34f-4vjh-jxj4

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

LOW 28

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02999 Published 2010-10-19 Fixed

TI-2010-03377 CVE-2010-3548 · GHSA-mp8j-7g6r-hj45

Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in…

LOW 28

Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02999 Published 2010-10-19 Fixed