Red Hat Security Advisory

RHSA-2011:1380

java-1.6.0-openjdk security update

Released 2011-10-18 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7, java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7.i386, java-1.6.0-openjdk-demo-1:1.6.0.0-1.23.1.9.10.el5_7 +7
Red Hat Enterprise Linux Desktop (v. 5 client) java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7, java-1.6.0-openjdk-1:1.6.0.0-1.23.1.9.10.el5_7.i386, java-1.6.0-openjdk-demo-1:1.6.0.0-1.23.1.9.10.el5_7 +7
Red Hat Enterprise Linux Server (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1, java-1.6.0-openjdk-devel-1:1.6.0.0-1.40.1.9.10.el6_1, java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.40.1.9.10.el6_1
Red Hat Enterprise Linux Server Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.40.1.9.10.el6_1, java-1.6.0-openjdk-demo-1:1.6.0.0-1.40.1.9.10.el6_1, java-1.6.0-openjdk-src-1:1.6.0.0-1.40.1.9.10.el6_1

Fixes 13 records

TI-2011-03122 CVE-2011-3544 · GHSA-25jq-3vh4-pgv4

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

CRITICAL 100KEV

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect con…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.96653 Published 2011-10-19 Partial fix CWE-284

TI-2011-03134 CVE-2011-3556 · GHSA-x97f-rpv2-wwmc

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

HIGH 72

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.76405 Published 2011-10-19 Partial fix

TI-2011-02999 CVE-2011-3389 · GHSA-rhch-pcq2-7gp3

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft…

MEDIUM 58

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initializa…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.73327 Published 2011-09-06 Partial fix CWE-326

TI-2011-03132 CVE-2011-3554 · GHSA-vx55-8v47-79g6

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

MEDIUM 49

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and untrusted Ja…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03304 Published 2011-10-19 Fixed

TI-2011-03126 CVE-2011-3548 · GHSA-3frf-3pj9-pfc5

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

MEDIUM 49

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start app…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03277 Published 2011-10-19 Partial fix

TI-2011-03100 CVE-2011-3521 · GHSA-w2wm-rj3g-vgpf

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

MEDIUM 49

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, 7, 6 Update 27 and earlier, and 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and untrust…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.039 Published 2011-10-19 Fixed

TI-2011-03129 CVE-2011-3551 · GHSA-hf9g-qf2v-h32m

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

MEDIUM 47

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity,…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04549 Published 2011-10-19 Fixed

TI-2011-03135 CVE-2011-3557 · GHSA-7fq2-gpx6-fhfw

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

LOW 36

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03477 Published 2011-10-19 Partial fix

TI-2011-03138 CVE-2011-3560 · GHSA-4g33-3743-jf7f

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

LOW 33

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02605 Published 2011-10-19 Partial fix

TI-2011-03136 CVE-2011-3558 · GHSA-jhv3-7w8g-g3x5

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

LOW 28

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confid…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0248 Published 2011-10-19 Fixed

TI-2011-03125 CVE-2011-3547 · GHSA-vhwg-xmr6-4mmj

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

LOW 28

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02685 Published 2011-10-19 Partial fix

TI-2011-03131 CVE-2011-3553 · GHSA-pch5-2rr3-9w92

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

LOW 21

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote authenticated users to affect confidentiality, r…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02205 Published 2011-10-19 Fixed

TI-2011-03130 CVE-2011-3552 · GHSA-fhmq-h5fp-gqjw

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

LOW 19

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02905 Published 2011-10-19 Partial fix