Red Hat Security AdvisoryRHSA-2011:0176
java-1.6.0-openjdk security update
Released 2011-01-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5.6.z server) java-1.6.0-openjdk-1:1.6.0.0-1.17.b17.el5, java-1.6.0-openjdk-1:1.6.0.0-1.17.b17.el5.i386, java-1.6.0-openjdk-demo-1:1.6.0.0-1.17.b17.el5 +7
Fixes 2 records
Priority LOW 35
The JNLP SecurityManager in IcedTea (IcedTea.so) 1.7 before 1.7.7, 1.8 before 1.8.4, and 1.9 before 1.9.4 for Java OpenJDK returns from the checkPermission method instead of throwing an exception in certain circumstances…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02533 · Published 2011-01-20 · Fixed CWE-264
Priority LOW 28
IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as public, which allows remote attackers to obtain sensitive information including (1)…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02999 · Published 2010-12-08 · Partial fix CWE-200
