Red Hat Security AdvisoryRHSA-2016:0057
java-1.6.0-sun security update
Released 2016-01-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7, java-1.6.0-sun-demo-1:1.6.0.111-1jpp.1.el7, java-1.6.0-sun-devel-1:1.6.0.111-1jpp.1.el7 +3
- Oracle Java for Red Hat Enterprise Linux Client 5 java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11, java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11.i586, java-1.6.0-sun-demo-1:1.6.0.111-1jpp.3.el5_11 +9
- Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7, java-1.6.0-sun-demo-1:1.6.0.111-1jpp.1.el7, java-1.6.0-sun-devel-1:1.6.0.111-1jpp.1.el7 +3
- Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7, java-1.6.0-sun-demo-1:1.6.0.111-1jpp.3.el6_7, java-1.6.0-sun-devel-1:1.6.0.111-1jpp.3.el6_7 +3
- Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7, java-1.6.0-sun-demo-1:1.6.0.111-1jpp.3.el6_7, java-1.6.0-sun-devel-1:1.6.0.111-1jpp.3.el6_7 +3
- Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7, java-1.6.0-sun-demo-1:1.6.0.111-1jpp.1.el7, java-1.6.0-sun-devel-1:1.6.0.111-1jpp.1.el7 +3
- Oracle Java for Red Hat Enterprise Linux Server 5 java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11, java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11.i586, java-1.6.0-sun-demo-1:1.6.0.111-1jpp.3.el5_11 +9
- Oracle Java for Red Hat Enterprise Linux Server 6 java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7, java-1.6.0-sun-demo-1:1.6.0.111-1jpp.3.el6_7, java-1.6.0-sun-devel-1:1.6.0.111-1jpp.3.el6_7 +3
- Oracle Java for Red Hat Enterprise Linux Workstation java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7, java-1.6.0-sun-demo-1:1.6.0.111-1jpp.3.el6_7, java-1.6.0-sun-devel-1:1.6.0.111-1jpp.3.el6_7 +3
- Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7, java-1.6.0-sun-demo-1:1.6.0.111-1jpp.1.el7, java-1.6.0-sun-devel-1:1.6.0.111-1jpp.1.el7 +3
Fixes 7 records
Priority MEDIUM 64
Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.14714 · Published 2016-01-21 · Fixed
Priority MEDIUM 59
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confidentiality, integrity, and availability vi…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07211 · Published 2016-01-21 · Fixed
Priority MEDIUM 45
Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow r…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.10339 · Published 2015-11-13 · Partial fix CWE-120
Priority MEDIUM 41
Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of s…
CVSS 3.0HIGH 7.3· Network · No auth · No interaction · EPSS 0.06054 · Published 2016-01-21 · Partial fix CWE-119
Priority LOW 37
Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect availability via ve…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05453 · Published 2016-01-21 · Fixed
Priority LOW 36
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect integrity via unknown vectors related to Networ…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04644 · Published 2016-01-21 · Fixed
Priority LOW 25
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE Embedded 8u65 allows remote authenticated users to affect confidentiality via vectors related…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03531 · Published 2016-01-21 · Fixed
THREATIST.IORead the docs