Red Hat Security AdvisoryRHSA-2012:0135
java-1.6.0-openjdk security update
Released 2012-02-14 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2
- Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-demo-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-devel-1:1.6.0.0-1.43.1.10.6.el6_2 +2
- Red Hat Enterprise Linux HPC Node (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-demo-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-devel-1:1.6.0.0-1.43.1.10.6.el6_2 +2
- Red Hat Enterprise Linux Server (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-devel-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.43.1.10.6.el6_2
- Red Hat Enterprise Linux Server Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-demo-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-src-1:1.6.0.0-1.43.1.10.6.el6_2
- Red Hat Enterprise Linux Workstation (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-devel-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.43.1.10.6.el6_2
- Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-demo-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-src-1:1.6.0.0-1.43.1.10.6.el6_2
Fixes 10 records
Priority CRITICAL 100KEV
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.98189 · Published 2012-06-07 · Partial fix CWE-843
Priority MEDIUM 60
Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other products, computes hash values for form parameters without restricting th…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.68155 · Published 2011-12-30 · Fixed CWE-20
Priority MEDIUM 52
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, and 6 Update 30 and earlier, allows remote attackers to affect confidentiality, integrity, and availabil…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05751 · Published 2012-02-15 · Fixed
Priority LOW 38
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02627 · Published 2012-02-15 · Partial fix
Priority LOW 38
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Jav…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02786 · Published 2012-02-15 · Partial fix
Priority LOW 35
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote attackers to…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.03697 · Published 2012-02-15 · Partial fix
Priority LOW 34
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Jav…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.02806 · Published 2012-02-15 · Partial fix
Priority LOW 29
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect availability vi…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03487 · Published 2012-02-15 · Partial fix
Priority LOW 24
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Jav…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02065 · Published 2012-02-15 · Partial fix
Priority LOW 21
Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Sessio…
CVSS 2.0LOW 3.6· Network · Low privileges · Interaction — · EPSS 0.01632 · Published 2012-01-18 · Partial fix
THREATIST.IORead the docs