Red Hat Security Advisory

RHSA-2017:0177

java-1.6.0-sun security update

Released 2017-01-19 · Red Hat rating Critical · View on Red Hat →

Fixed in

Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3, java-1.6.0-sun-demo-1:1.6.0.141-1jpp.1.el7_3, java-1.6.0-sun-devel-1:1.6.0.141-1jpp.1.el7_3 +3
Oracle Java for Red Hat Enterprise Linux Client 5 java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11, java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11.i586, java-1.6.0-sun-demo-1:1.6.0.141-1jpp.1.el5_11 +9
Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3, java-1.6.0-sun-demo-1:1.6.0.141-1jpp.1.el7_3, java-1.6.0-sun-devel-1:1.6.0.141-1jpp.1.el7_3 +3
Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8, java-1.6.0-sun-demo-1:1.6.0.141-1jpp.1.el6_8, java-1.6.0-sun-devel-1:1.6.0.141-1jpp.1.el6_8 +3
Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8, java-1.6.0-sun-demo-1:1.6.0.141-1jpp.1.el6_8, java-1.6.0-sun-devel-1:1.6.0.141-1jpp.1.el6_8 +3
Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3, java-1.6.0-sun-demo-1:1.6.0.141-1jpp.1.el7_3, java-1.6.0-sun-devel-1:1.6.0.141-1jpp.1.el7_3 +3
Oracle Java for Red Hat Enterprise Linux Server 5 java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11, java-1.6.0-sun-1:1.6.0.141-1jpp.1.el5_11.i586, java-1.6.0-sun-demo-1:1.6.0.141-1jpp.1.el5_11 +9
Oracle Java for Red Hat Enterprise Linux Server 6 java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8, java-1.6.0-sun-demo-1:1.6.0.141-1jpp.1.el6_8, java-1.6.0-sun-devel-1:1.6.0.141-1jpp.1.el6_8 +3
Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.6.0-sun-1:1.6.0.141-1jpp.1.el7_3, java-1.6.0-sun-demo-1:1.6.0.141-1jpp.1.el7_3, java-1.6.0-sun-devel-1:1.6.0.141-1jpp.1.el7_3 +3
Oracle Java for Red Hat Enterprise Linux Workstation 6 java-1.6.0-sun-1:1.6.0.141-1jpp.1.el6_8, java-1.6.0-sun-demo-1:1.6.0.141-1jpp.1.el6_8, java-1.6.0-sun-devel-1:1.6.0.141-1jpp.1.el6_8 +3

Fixes 10 records

TI-2017-02441 CVE-2017-3241 · GHSA-j64j-5jrj-hggj

Improper input validation in Oracle Java SE

HIGH 66

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI).

CVSS 3.0CRITICAL 9.0 Network No auth No interaction EPSS 0.32839 Published 2017-01-27 Fixed CWE-20

TI-2017-02472 CVE-2017-3272 · GHSA-c84v-7x2r-5mvq

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

MEDIUM 48

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).

CVSS 3.0CRITICAL 9.6 Network No auth User interaction EPSS 0.02997 Published 2017-01-27 Fixed

TI-2017-02453 CVE-2017-3253 · GHSA-4cjw-q36g-5wch

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

MEDIUM 45

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03868 Published 2017-01-27 Fixed

TI-2016-04813 CVE-2016-5546 · GHSA-rrgr-g95w-822m

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

MEDIUM 45

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03167 Published 2017-01-27 Fixed

TI-2016-04818 CVE-2016-5552 · GHSA-c62w-9mvr-73gf

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

LOW 35

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02729 Published 2017-01-27 Fixed

TI-2016-04815 CVE-2016-5548 · GHSA-m9ww-jj36-frjp

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

LOW 34

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.02972 Published 2017-01-27 Fixed

TI-2017-02452 CVE-2017-3252 · GHSA-942v-9xcr-5cqh

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…

LOW 30

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAAS).

CVSS 3.0MEDIUM 5.8 Network Low privileges User interaction EPSS 0.01933 Published 2017-01-27 Fixed

TI-2017-02461 CVE-2017-3261 · GHSA-4cvq-qgfc-6fqx

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…

LOW 25

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking).

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.02499 Published 2017-01-27 Fixed

TI-2017-02431 CVE-2017-3231 · GHSA-25f7-696r-m32w

Information disclosure in Oracle Java SE

LOW 24

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking).

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.02166 Published 2017-01-27 Fixed CWE-200

TI-2017-02459 CVE-2017-3259 · GHSA-2fjh-pp98-gvch

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment).

LOW 22

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment).

CVSS 3.0LOW 3.7 Network No auth No interaction EPSS 0.02162 Published 2017-01-27 Fixed