Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2010-3564 (GCVE-0-2010-3564)
Vulnerability from cvelistv5
- n/a
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-07T03:11:44.455Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://support.avaya.com/css/P8/documents/100114327" }, { "name": "RHSA-2010:0865", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://www.redhat.com/support/errata/RHSA-2010-0865.html" }, { "name": "GLSA-201406-32", "tags": [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred" ], "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml" }, { "name": "43963", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/43963" }, { "name": "oval:org.mitre.oval:def:12398", "tags": [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred" ], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12398" }, { "name": "SSRT100333", "tags": [ "vendor-advisory", "x_refsource_HP", "x_transferred" ], "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c02616748" }, { "name": "RHSA-2010:0768", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://www.redhat.com/support/errata/RHSA-2010-0768.html" }, { "name": "FEDORA-2010-16240", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html" }, { "name": "USN-1010-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred" ], "url": "http://www.ubuntu.com/usn/USN-1010-1" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html" }, { "name": "41972", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/41972" }, { "name": "ADV-2010-3086", "tags": [ "vdb-entry", "x_refsource_VUPEN", "x_transferred" ], "url": "http://www.vupen.com/english/advisories/2010/3086" }, { "name": "HPSBUX02608", "tags": [ "vendor-advisory", "x_refsource_HP", "x_transferred" ], "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c02616748" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://support.avaya.com/css/P8/documents/100123193" }, { "name": "TA10-287A", "tags": [ "third-party-advisory", "x_refsource_CERT", "x_transferred" ], "url": "http://www.us-cert.gov/cas/techalerts/TA10-287A.html" }, { "name": "42377", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/42377" }, { "name": "FEDORA-2010-16312", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html" }, { "name": "FEDORA-2010-16294", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2010-10-12T00:00:00", "descriptions": [ { "lang": "en", "value": "Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2017-09-18T12:57:01", "orgId": "43595867-4340-4103-b7a2-9a5208d29a85", "shortName": "oracle" }, "references": [ { "tags": [ "x_refsource_CONFIRM" ], "url": "http://support.avaya.com/css/P8/documents/100114327" }, { "name": "RHSA-2010:0865", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://www.redhat.com/support/errata/RHSA-2010-0865.html" }, { "name": "GLSA-201406-32", "tags": [ "vendor-advisory", "x_refsource_GENTOO" ], "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml" }, { "name": "43963", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/43963" }, { "name": "oval:org.mitre.oval:def:12398", "tags": [ "vdb-entry", "signature", "x_refsource_OVAL" ], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12398" }, { "name": "SSRT100333", "tags": [ "vendor-advisory", "x_refsource_HP" ], "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c02616748" }, { "name": "RHSA-2010:0768", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://www.redhat.com/support/errata/RHSA-2010-0768.html" }, { "name": "FEDORA-2010-16240", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html" }, { "name": "USN-1010-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU" ], "url": "http://www.ubuntu.com/usn/USN-1010-1" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html" }, { "name": "41972", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/41972" }, { "name": "ADV-2010-3086", "tags": [ "vdb-entry", "x_refsource_VUPEN" ], "url": "http://www.vupen.com/english/advisories/2010/3086" }, { "name": "HPSBUX02608", "tags": [ "vendor-advisory", "x_refsource_HP" ], "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c02616748" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://support.avaya.com/css/P8/documents/100123193" }, { "name": "TA10-287A", "tags": [ "third-party-advisory", "x_refsource_CERT" ], "url": "http://www.us-cert.gov/cas/techalerts/TA10-287A.html" }, { "name": "42377", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/42377" }, { "name": "FEDORA-2010-16312", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html" }, { "name": "FEDORA-2010-16294", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "secalert_us@oracle.com", "ID": "CVE-2010-3564", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "http://support.avaya.com/css/P8/documents/100114327", "refsource": "CONFIRM", "url": "http://support.avaya.com/css/P8/documents/100114327" }, { "name": "RHSA-2010:0865", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2010-0865.html" }, { "name": "GLSA-201406-32", "refsource": "GENTOO", "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml" }, { "name": "43963", "refsource": "BID", "url": "http://www.securityfocus.com/bid/43963" }, { "name": "oval:org.mitre.oval:def:12398", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12398" }, { "name": "SSRT100333", "refsource": "HP", "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c02616748" }, { "name": "RHSA-2010:0768", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2010-0768.html" }, { "name": "FEDORA-2010-16240", "refsource": "FEDORA", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html" }, { "name": "USN-1010-1", "refsource": "UBUNTU", "url": "http://www.ubuntu.com/usn/USN-1010-1" }, { "name": "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html" }, { "name": "http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html", "refsource": "CONFIRM", "url": "http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html" }, { "name": "41972", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/41972" }, { "name": "ADV-2010-3086", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2010/3086" }, { "name": "HPSBUX02608", "refsource": "HP", "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c02616748" }, { "name": "http://support.avaya.com/css/P8/documents/100123193", "refsource": "CONFIRM", "url": "http://support.avaya.com/css/P8/documents/100123193" }, { "name": "TA10-287A", "refsource": "CERT", "url": "http://www.us-cert.gov/cas/techalerts/TA10-287A.html" }, { "name": "42377", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/42377" }, { "name": "FEDORA-2010-16312", "refsource": "FEDORA", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html" }, { "name": "FEDORA-2010-16294", "refsource": "FEDORA", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html" } ] } } } }, "cveMetadata": { "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85", "assignerShortName": "oracle", "cveId": "CVE-2010-3564", "datePublished": "2010-10-14T17:00:00", "dateReserved": "2010-09-20T00:00:00", "dateUpdated": "2024-08-07T03:11:44.455Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2010-3564\",\"sourceIdentifier\":\"secalert_us@oracle.com\",\"published\":\"2010-10-14T18:00:17.837\",\"lastModified\":\"2025-04-11T00:51:21.963\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad no especificada en el componente Oracle Communications Messaging Server (Sun Java System Messaging Server) en Sun Products Suite de Oracle versi\u00f3n 7.0, permite a los atacantes remotos afectar a la confidencialidad e integridad por medio de vectores desconocidos relacionados con Webmail. NOTA: la informaci\u00f3n anterior fue obtenida de la CPU en octubre de 2010. Oracle no ha comentado las afirmaciones de un proveedor aguas abajo confiable de que la implementaci\u00f3n de Kerberos no comprueba apropiadamente las peticiones AP-REQ, lo que permite a los atacantes causar una denegaci\u00f3n de servicio en la JVM. NOTA: CVE no ha investigado la aparente discrepancia entre los dos proveedores con respecto a las consecuencias de este problema.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:N\",\"baseScore\":6.4,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":4.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:sun_products_suite:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"254C5676-E34D-432F-8BF9-F4FE0956ED1E\"}]}]}],\"references\":[{\"url\":\"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c02616748\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c02616748\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"http://secunia.com/advisories/41972\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/42377\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-201406-32.xml\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"http://support.avaya.com/css/P8/documents/100114327\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"http://support.avaya.com/css/P8/documents/100123193\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2010-0768.html\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2010-0865.html\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"http://www.securityfocus.com/bid/43963\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"http://www.ubuntu.com/usn/USN-1010-1\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"http://www.us-cert.gov/cas/techalerts/TA10-287A.html\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"US Government Resource\"]},{\"url\":\"http://www.vupen.com/english/advisories/2010/3086\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12398\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c02616748\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c02616748\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/41972\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/42377\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-201406-32.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://support.avaya.com/css/P8/documents/100114327\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://support.avaya.com/css/P8/documents/100123193\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2010-0768.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2010-0865.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/43963\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-1010-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.us-cert.gov/cas/techalerts/TA10-287A.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"US Government Resource\"]},{\"url\":\"http://www.vupen.com/english/advisories/2010/3086\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12398\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}" } }
fkie_cve-2010-3564
Vulnerability from fkie_nvd
URL | Tags | ||
---|---|---|---|
secalert_us@oracle.com | http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02616748 | ||
secalert_us@oracle.com | http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02616748 | ||
secalert_us@oracle.com | http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html | ||
secalert_us@oracle.com | http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html | ||
secalert_us@oracle.com | http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html | ||
secalert_us@oracle.com | http://secunia.com/advisories/41972 | Vendor Advisory | |
secalert_us@oracle.com | http://secunia.com/advisories/42377 | Vendor Advisory | |
secalert_us@oracle.com | http://security.gentoo.org/glsa/glsa-201406-32.xml | ||
secalert_us@oracle.com | http://support.avaya.com/css/P8/documents/100114327 | ||
secalert_us@oracle.com | http://support.avaya.com/css/P8/documents/100123193 | ||
secalert_us@oracle.com | http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html | ||
secalert_us@oracle.com | http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html | ||
secalert_us@oracle.com | http://www.redhat.com/support/errata/RHSA-2010-0768.html | ||
secalert_us@oracle.com | http://www.redhat.com/support/errata/RHSA-2010-0865.html | ||
secalert_us@oracle.com | http://www.securityfocus.com/bid/43963 | ||
secalert_us@oracle.com | http://www.ubuntu.com/usn/USN-1010-1 | ||
secalert_us@oracle.com | http://www.us-cert.gov/cas/techalerts/TA10-287A.html | US Government Resource | |
secalert_us@oracle.com | http://www.vupen.com/english/advisories/2010/3086 | Vendor Advisory | |
secalert_us@oracle.com | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12398 | ||
af854a3a-2127-422b-91ae-364da2661108 | http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02616748 | ||
af854a3a-2127-422b-91ae-364da2661108 | http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02616748 | ||
af854a3a-2127-422b-91ae-364da2661108 | http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html | ||
af854a3a-2127-422b-91ae-364da2661108 | http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html | ||
af854a3a-2127-422b-91ae-364da2661108 | http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html | ||
af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/41972 | Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/42377 | Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | http://security.gentoo.org/glsa/glsa-201406-32.xml | ||
af854a3a-2127-422b-91ae-364da2661108 | http://support.avaya.com/css/P8/documents/100114327 | ||
af854a3a-2127-422b-91ae-364da2661108 | http://support.avaya.com/css/P8/documents/100123193 | ||
af854a3a-2127-422b-91ae-364da2661108 | http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html | ||
af854a3a-2127-422b-91ae-364da2661108 | http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html | ||
af854a3a-2127-422b-91ae-364da2661108 | http://www.redhat.com/support/errata/RHSA-2010-0768.html | ||
af854a3a-2127-422b-91ae-364da2661108 | http://www.redhat.com/support/errata/RHSA-2010-0865.html | ||
af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/43963 | ||
af854a3a-2127-422b-91ae-364da2661108 | http://www.ubuntu.com/usn/USN-1010-1 | ||
af854a3a-2127-422b-91ae-364da2661108 | http://www.us-cert.gov/cas/techalerts/TA10-287A.html | US Government Resource | |
af854a3a-2127-422b-91ae-364da2661108 | http://www.vupen.com/english/advisories/2010/3086 | Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12398 |
Vendor | Product | Version | |
---|---|---|---|
oracle | sun_products_suite | 7.0 |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:oracle:sun_products_suite:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "254C5676-E34D-432F-8BF9-F4FE0956ED1E", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue." }, { "lang": "es", "value": "Una vulnerabilidad no especificada en el componente Oracle Communications Messaging Server (Sun Java System Messaging Server) en Sun Products Suite de Oracle versi\u00f3n 7.0, permite a los atacantes remotos afectar a la confidencialidad e integridad por medio de vectores desconocidos relacionados con Webmail. NOTA: la informaci\u00f3n anterior fue obtenida de la CPU en octubre de 2010. Oracle no ha comentado las afirmaciones de un proveedor aguas abajo confiable de que la implementaci\u00f3n de Kerberos no comprueba apropiadamente las peticiones AP-REQ, lo que permite a los atacantes causar una denegaci\u00f3n de servicio en la JVM. NOTA: CVE no ha investigado la aparente discrepancia entre los dos proveedores con respecto a las consecuencias de este problema." } ], "id": "CVE-2010-3564", "lastModified": "2025-04-11T00:51:21.963", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 6.4, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ] }, "published": "2010-10-14T18:00:17.837", "references": [ { "source": "secalert_us@oracle.com", "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c02616748" }, { "source": "secalert_us@oracle.com", "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c02616748" }, { "source": "secalert_us@oracle.com", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html" }, { "source": "secalert_us@oracle.com", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html" }, { "source": "secalert_us@oracle.com", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html" }, { "source": "secalert_us@oracle.com", "tags": [ "Vendor Advisory" ], "url": "http://secunia.com/advisories/41972" }, { "source": "secalert_us@oracle.com", "tags": [ "Vendor Advisory" ], "url": "http://secunia.com/advisories/42377" }, { "source": "secalert_us@oracle.com", "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml" }, { "source": "secalert_us@oracle.com", "url": "http://support.avaya.com/css/P8/documents/100114327" }, { "source": "secalert_us@oracle.com", "url": "http://support.avaya.com/css/P8/documents/100123193" }, { "source": "secalert_us@oracle.com", "url": "http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html" }, { "source": "secalert_us@oracle.com", "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html" }, { "source": "secalert_us@oracle.com", "url": "http://www.redhat.com/support/errata/RHSA-2010-0768.html" }, { "source": "secalert_us@oracle.com", "url": "http://www.redhat.com/support/errata/RHSA-2010-0865.html" }, { "source": "secalert_us@oracle.com", "url": "http://www.securityfocus.com/bid/43963" }, { "source": "secalert_us@oracle.com", "url": "http://www.ubuntu.com/usn/USN-1010-1" }, { "source": "secalert_us@oracle.com", "tags": [ "US Government Resource" ], "url": "http://www.us-cert.gov/cas/techalerts/TA10-287A.html" }, { "source": "secalert_us@oracle.com", "tags": [ "Vendor Advisory" ], "url": "http://www.vupen.com/english/advisories/2010/3086" }, { "source": "secalert_us@oracle.com", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12398" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c02616748" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c02616748" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "http://secunia.com/advisories/41972" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "http://secunia.com/advisories/42377" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://support.avaya.com/css/P8/documents/100114327" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://support.avaya.com/css/P8/documents/100123193" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.redhat.com/support/errata/RHSA-2010-0768.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.redhat.com/support/errata/RHSA-2010-0865.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/43963" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.ubuntu.com/usn/USN-1010-1" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "US Government Resource" ], "url": "http://www.us-cert.gov/cas/techalerts/TA10-287A.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "http://www.vupen.com/english/advisories/2010/3086" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12398" } ], "sourceIdentifier": "secalert_us@oracle.com", "vulnStatus": "Deferred", "weaknesses": [ { "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
CERTA-2010-AVI-573
Vulnerability from certfr_avis
De multiples vunlnérabilités ont été corrigées dans la suite de produits Hitachi Cosminexus.
Description
De multiples vulnérabilités dans la suite de produits Hitachi Cosminexus, pour la plupart liées à l'implémentation de Java, ont été corrigées.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneVendor | Product | Description | ||
---|---|---|---|---|
SolarWinds | N/A | uCosminexus Developer 8.50, 6.71 et antérieures ; | ||
SolarWinds | N/A | uCosminexus Client 8.50, 7.60, 6.71 et antérieures. | ||
SolarWinds | N/A | uCosminexus Service Architect 8.50, 7.60 et antérieures ; | ||
SolarWinds | Platform | uCosminexus Service Platform 8.50, 7.60 et antérieures ; | ||
SolarWinds | N/A | Cosminexus Application Server 6.51, 5.05 et antérieures ; | ||
SolarWinds | N/A | uCosminexus Application Server 8.50, 7.60, 6.71 et antérieures ; | ||
SolarWinds | N/A | Cosminexus Developer 6.51, 5.05 et antérieures ; |
Title | Publication Time | Tags | ||||||
---|---|---|---|---|---|---|---|---|
|
{ "$ref": "https://www.cert.ssi.gouv.fr/openapi.json", "affected_systems": [ { "description": "uCosminexus Developer 8.50, 6.71 et ant\u00e9rieures ;", "product": { "name": "N/A", "vendor": { "name": "SolarWinds", "scada": false } } }, { "description": "uCosminexus Client 8.50, 7.60, 6.71 et ant\u00e9rieures.", "product": { "name": "N/A", "vendor": { "name": "SolarWinds", "scada": false } } }, { "description": "uCosminexus Service Architect 8.50, 7.60 et ant\u00e9rieures ;", "product": { "name": "N/A", "vendor": { "name": "SolarWinds", "scada": false } } }, { "description": "uCosminexus Service Platform 8.50, 7.60 et ant\u00e9rieures ;", "product": { "name": "Platform", "vendor": { "name": "SolarWinds", "scada": false } } }, { "description": "Cosminexus Application Server 6.51, 5.05 et ant\u00e9rieures ;", "product": { "name": "N/A", "vendor": { "name": "SolarWinds", "scada": false } } }, { "description": "uCosminexus Application Server 8.50, 7.60, 6.71 et ant\u00e9rieures ;", "product": { "name": "N/A", "vendor": { "name": "SolarWinds", "scada": false } } }, { "description": "Cosminexus Developer 6.51, 5.05 et ant\u00e9rieures ;", "product": { "name": "N/A", "vendor": { "name": "SolarWinds", "scada": false } } } ], "affected_systems_content": null, "content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s dans la suite de produits Hitachi\nCosminexus, pour la plupart li\u00e9es \u00e0 l\u0027impl\u00e9mentation de Java, ont \u00e9t\u00e9\ncorrig\u00e9es.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n", "cves": [ { "name": "CVE-2010-3564", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3564" }, { "name": "CVE-2010-3571", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3571" }, { "name": "CVE-2010-3566", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3566" }, { "name": "CVE-2009-3555", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3555" }, { "name": "CVE-2010-3548", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3548" }, { "name": "CVE-2010-3561", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3561" }, { "name": "CVE-2010-3567", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3567" }, { "name": "CVE-2010-3574", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3574" }, { "name": "CVE-2010-3554", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3554" } ], "initial_release_date": "2010-12-02T00:00:00", "last_revision_date": "2010-12-02T00:00:00", "links": [ { "title": "Bulletin de s\u00e9curit\u00e9 Hitachi HS10-030 :", "url": "http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html" } ], "reference": "CERTA-2010-AVI-573", "revisions": [ { "description": "version initiale.", "revision_date": "2010-12-02T00:00:00.000000" } ], "risks": [ { "description": "Multiples risques dont ex\u00e9cution de code arbitraire \u00e0 distance" } ], "summary": "De multiples vunln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans la suite de produits\nHitachi Cosminexus.\n", "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Hitachi Cosminexus", "vendor_advisories": [ { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Hitachi HS10-030 du 30 novembre 2010", "url": null } ] }
CERTA-2010-AVI-499
Vulnerability from certfr_avis
De multiples vulnérabilités présentes dans les produits Oracle permettent à un utilisateur distant de provoquer un déni de service ou d'exécuter du code arbitraire.
Description
De multiples vulnérabilités sont présentes dans les produits Oracle comme Oracle Database ou Oracle Application Server. Elles permettent, entre autres, à un utilisateur distant malintentionné de provoquer un déni de service ou d'exécuter du code arbitaire.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneVendor | Product | Description | ||
---|---|---|---|---|
Oracle | PeopleSoft | PeopleSoft Enterprise EPM, Campus Solutions, version 8.9, 9.0 et 9.1; | ||
Oracle | N/A | Oracle VM, version 2.2.1. | ||
Oracle | PeopleSoft | PeopleSoft Enterprise PeopleTools, versions 8.49 et 8.50 ; | ||
Oracle | N/A | Oracle Transportation Management, Versions: 5.5, 6.0 et 6.1 ; | ||
Oracle | N/A | Oracle Database 11g Release 2, version 11201 ; | ||
Oracle | N/A | Oracle Sun Product Suite; | ||
Oracle | N/A | Oracle Fusion Middleware 11gR1, versions 11.1.1.1.0, 11.1.1.2.0 ; | ||
Oracle | N/A | Siebel Core, versions 7.7, 7.8, 8.0 et 8.1 ; | ||
Oracle | PeopleSoft | PeopleSoft Enterprise CRM, FMS, HCM et SCM (Supply Chain), version 8.9, 9.0 et 9.1 ; | ||
Oracle | N/A | Oracle E-Business Suite Release 12, versions 1204, 1205, 1206, 1211 et 1212 ; | ||
Oracle | N/A | Oracle BI Publisher, versions 10.1.3.3.2, 10.1.3.4.0, 10.1.3.4.1 ; | ||
Oracle | N/A | Oracle Application Server, 10gR3, version 101350 ; | ||
Oracle | N/A | Oracle E-Business Suite Release 11i, versions 11510 et 115102 ; | ||
Oracle | N/A | Oracle Application Server, 10gR2, version 101230 ; | ||
Oracle | N/A | Oracle Identity Management 10g, version 101401, 10143 ; | ||
Oracle | N/A | Primavera P6 Enterprise Project Portfolio Management, Versions: 6.21.3.0, 7.0.1.0 ; | ||
Oracle | N/A | Agile PLM, version 9.3.0.0 ; | ||
Oracle | N/A | Oracle Database 10g Release 2, versions 10203, 10204 ; | ||
Oracle | N/A | Oracle Database 10g, version 10105 ; | ||
Oracle | N/A | Oracle Database 11g Release 1, version 11107 ; |
Title | Publication Time | Tags | ||||||
---|---|---|---|---|---|---|---|---|
|
{ "$ref": "https://www.cert.ssi.gouv.fr/openapi.json", "affected_systems": [ { "description": "PeopleSoft Enterprise EPM, Campus Solutions, version 8.9, 9.0 et 9.1;", "product": { "name": "PeopleSoft", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "Oracle VM, version 2.2.1.", "product": { "name": "N/A", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "PeopleSoft Enterprise PeopleTools, versions 8.49 et 8.50 ;", "product": { "name": "PeopleSoft", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "Oracle Transportation Management, Versions: 5.5, 6.0 et 6.1 ;", "product": { "name": "N/A", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "Oracle Database 11g Release 2, version 11201 ;", "product": { "name": "N/A", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "Oracle Sun Product Suite;", "product": { "name": "N/A", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "Oracle Fusion Middleware 11gR1, versions 11.1.1.1.0, 11.1.1.2.0 ;", "product": { "name": "N/A", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "Siebel Core, versions 7.7, 7.8, 8.0 et 8.1 ;", "product": { "name": "N/A", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "PeopleSoft Enterprise CRM, FMS, HCM et SCM (Supply Chain), version 8.9, 9.0 et 9.1 ;", "product": { "name": "PeopleSoft", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "Oracle E-Business Suite Release 12, versions 1204, 1205, 1206, 1211 et 1212 ;", "product": { "name": "N/A", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "Oracle BI Publisher, versions 10.1.3.3.2, 10.1.3.4.0, 10.1.3.4.1 ;", "product": { "name": "N/A", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "Oracle Application Server, 10gR3, version 101350 ;", "product": { "name": "N/A", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "Oracle E-Business Suite Release 11i, versions 11510 et 115102 ;", "product": { "name": "N/A", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "Oracle Application Server, 10gR2, version 101230 ;", "product": { "name": "N/A", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "Oracle Identity Management 10g, version 101401, 10143 ;", "product": { "name": "N/A", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "Primavera P6 Enterprise Project Portfolio Management, Versions: 6.21.3.0, 7.0.1.0 ;", "product": { "name": "N/A", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "Agile PLM, version 9.3.0.0 ;", "product": { "name": "N/A", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "Oracle Database 10g Release 2, versions 10203, 10204 ;", "product": { "name": "N/A", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "Oracle Database 10g, version 10105 ;", "product": { "name": "N/A", "vendor": { "name": "Oracle", "scada": false } } }, { "description": "Oracle Database 11g Release 1, version 11107 ;", "product": { "name": "N/A", "vendor": { "name": "Oracle", "scada": false } } } ], "affected_systems_content": null, "content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s sont pr\u00e9sentes dans les produits Oracle\ncomme Oracle Database ou Oracle Application Server. Elles permettent,\nentre autres, \u00e0 un utilisateur distant malintentionn\u00e9 de provoquer un\nd\u00e9ni de service ou d\u0027ex\u00e9cuter du code arbitaire.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n", "cves": [ { "name": "CVE-2010-3534", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3534" }, { "name": "CVE-2010-2406", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2406" }, { "name": "CVE-2010-2404", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2404" }, { "name": "CVE-2010-3537", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3537" }, { "name": "CVE-2010-3526", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3526" }, { "name": "CVE-2010-3585", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3585" }, { "name": "CVE-2010-2413", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2413" }, { "name": "CVE-2010-3564", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3564" }, { "name": "CVE-2010-3518", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3518" }, { "name": "CVE-2010-1321", "url": "https://www.cve.org/CVERecord?id=CVE-2010-1321" }, { "name": "CVE-2010-3580", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3580" }, { "name": "CVE-2010-3519", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3519" }, { "name": "CVE-2010-3539", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3539" }, { "name": "CVE-2010-3513", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3513" }, { "name": "CVE-2009-3301", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3301" }, { "name": "CVE-2010-3502", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3502" }, { "name": "CVE-2010-2410", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2410" }, { "name": "CVE-2010-3516", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3516" }, { "name": "CVE-2009-2949", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2949" }, { "name": "CVE-2009-2950", "url": "https://www.cve.org/CVERecord?id=CVE-2009-2950" }, { "name": "CVE-2010-3514", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3514" }, { "name": "CVE-2010-2414", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2414" }, { "name": "CVE-2010-2405", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2405" }, { "name": "CVE-2010-2390", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2390" }, { "name": "CVE-2010-3503", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3503" }, { "name": "CVE-2010-3515", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3515" }, { "name": "CVE-2010-2415", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2415" }, { "name": "CVE-2010-3582", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3582" }, { "name": "CVE-2010-3535", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3535" }, { "name": "CVE-2010-2391", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2391" }, { "name": "CVE-2010-2411", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2411" }, { "name": "CVE-2010-3500", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3500" }, { "name": "CVE-2010-3501", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3501" }, { "name": "CVE-2010-2396", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2396" }, { "name": "CVE-2010-3530", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3530" }, { "name": "CVE-2009-3555", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3555" }, { "name": "CVE-2010-3575", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3575" }, { "name": "CVE-2010-2418", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2418" }, { "name": "CVE-2010-2395", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2395" }, { "name": "CVE-2010-3527", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3527" }, { "name": "CVE-2010-3504", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3504" }, { "name": "CVE-2010-3547", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3547" }, { "name": "CVE-2010-3520", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3520" }, { "name": "CVE-2009-3302", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3302" }, { "name": "CVE-2010-3578", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3578" }, { "name": "CVE-2010-3583", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3583" }, { "name": "CVE-2010-0395", "url": "https://www.cve.org/CVERecord?id=CVE-2010-0395" }, { "name": "CVE-2010-3533", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3533" }, { "name": "CVE-2010-3523", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3523" }, { "name": "CVE-2010-3508", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3508" }, { "name": "CVE-2010-2416", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2416" }, { "name": "CVE-2010-2388", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2388" }, { "name": "CVE-2010-2419", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2419" }, { "name": "CVE-2010-3579", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3579" }, { "name": "CVE-2010-3532", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3532" }, { "name": "CVE-2010-3584", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3584" }, { "name": "CVE-2010-3538", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3538" }, { "name": "CVE-2010-3509", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3509" }, { "name": "CVE-2010-3577", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3577" }, { "name": "CVE-2010-3507", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3507" }, { "name": "CVE-2010-2409", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2409" }, { "name": "CVE-2010-3544", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3544" }, { "name": "CVE-2010-3522", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3522" }, { "name": "CVE-2010-3536", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3536" }, { "name": "CVE-2010-3576", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3576" }, { "name": "CVE-2010-3511", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3511" }, { "name": "CVE-2010-3531", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3531" }, { "name": "CVE-2010-2408", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2408" }, { "name": "CVE-2010-3540", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3540" }, { "name": "CVE-2010-2417", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2417" }, { "name": "CVE-2010-3524", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3524" }, { "name": "CVE-2010-3521", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3521" }, { "name": "CVE-2010-2412", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2412" }, { "name": "CVE-2010-3528", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3528" }, { "name": "CVE-2010-2407", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2407" }, { "name": "CVE-2010-3546", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3546" }, { "name": "CVE-2010-2389", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2389" }, { "name": "CVE-2010-3512", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3512" }, { "name": "CVE-2010-3529", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3529" }, { "name": "CVE-2010-3525", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3525" }, { "name": "CVE-2010-3517", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3517" }, { "name": "CVE-2010-3545", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3545" }, { "name": "CVE-2010-3581", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3581" }, { "name": "CVE-2010-3542", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3542" }, { "name": "CVE-2010-3506", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3506" } ], "initial_release_date": "2010-10-14T00:00:00", "last_revision_date": "2010-10-29T00:00:00", "links": [ { "title": "Bulletin de s\u00e9curit\u00e9 Oracle d\u0027octobre 2010 :", "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html" } ], "reference": "CERTA-2010-AVI-499", "revisions": [ { "description": "version initiale ;", "revision_date": "2010-10-14T00:00:00.000000" }, { "description": "mise \u00e0 jour des CVE.", "revision_date": "2010-10-29T00:00:00.000000" } ], "risks": [ { "description": "Ex\u00e9cution de code arbitraire \u00e0 distance" } ], "summary": "De multiples vuln\u00e9rabilit\u00e9s pr\u00e9sentes dans les produits Oracle\npermettent \u00e0 un utilisateur distant de provoquer un d\u00e9ni de service ou\nd\u0027ex\u00e9cuter du code arbitraire.\n", "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Oracle", "vendor_advisories": [ { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 Oracle d\u0027Octobre 2010", "url": null } ] }
rhsa-2010:0768
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated java-1.6.0-openjdk packages that fix several security issues and\ntwo bugs are now available for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "These packages provide the OpenJDK 6 Java Runtime Environment and the\nOpenJDK 6 Software Development Kit.\n\ndefaultReadObject of the Serialization API could be tricked into setting a\nvolatile field multiple times, which could allow a remote attacker to\nexecute arbitrary code with the privileges of the user running the applet\nor application. (CVE-2010-3569)\n\nRace condition in the way objects were deserialized could allow an\nuntrusted applet or application to misuse the privileges of the user\nrunning the applet or application. (CVE-2010-3568)\n\nMiscalculation in the OpenType font rendering implementation caused\nout-of-bounds memory access, which could allow remote attackers to execute\ncode with the privileges of the user running the java process.\n(CVE-2010-3567)\n\nJPEGImageWriter.writeImage in the imageio API improperly checked certain\nimage metadata, which could allow a remote attacker to execute arbitrary\ncode in the context of the user running the applet or application.\n(CVE-2010-3565)\n\nDouble free in IndexColorModel could cause an untrusted applet or\napplication to crash or, possibly, execute arbitrary code with the\nprivileges of the user running the applet or application. (CVE-2010-3562)\n\nThe privileged accept method of the ServerSocket class in the Common Object\nRequest Broker Architecture (CORBA) implementation in OpenJDK allowed it to\nreceive connections from any host, instead of just the host of the current\nconnection. An attacker could use this flaw to bypass restrictions defined\nby network permissions. (CVE-2010-3561)\n\nFlaws in the Swing library could allow an untrusted application to modify\nthe behavior and state of certain JDK classes. (CVE-2010-3557)\n\nFlaws in the CORBA implementation could allow an attacker to execute\narbitrary code by misusing permissions granted to certain system objects.\n(CVE-2010-3554)\n\nUIDefault.ProxyLazyValue had unsafe reflection usage, allowing untrusted\ncallers to create objects via ProxyLazyValue values. (CVE-2010-3553)\n\nHttpURLConnection improperly handled the \"chunked\" transfer encoding\nmethod, which could allow remote attackers to conduct HTTP response\nsplitting attacks. (CVE-2010-3549)\n\nHttpURLConnection improperly checked whether the calling code was granted\nthe \"allowHttpTrace\" permission, allowing untrusted code to create HTTP\nTRACE requests. (CVE-2010-3574)\n\nHttpURLConnection did not validate request headers set by applets, which\ncould allow remote attackers to trigger actions otherwise restricted to\nHTTP clients. (CVE-2010-3541, CVE-2010-3573)\n\nThe Kerberos implementation improperly checked the sanity of AP-REQ\nrequests, which could cause a denial of service condition in the receiving\nJava Virtual Machine. (CVE-2010-3564)\n\nThe RHSA-2010:0339 update mitigated a man-in-the-middle attack in the way\nthe TLS/SSL (Transport Layer Security/Secure Sockets Layer) protocols\nhandle session renegotiation by disabling renegotiation. This update\nimplements the TLS Renegotiation Indication Extension as defined in RFC\n5746, allowing secure renegotiation between updated clients and servers.\n(CVE-2009-3555)\n\nThe NetworkInterface class improperly checked the network \"connect\"\npermissions for local network addresses, which could allow remote attackers\nto read local network addresses. (CVE-2010-3551)\n\nInformation leak flaw in the Java Naming and Directory Interface (JNDI)\ncould allow a remote attacker to access information about\notherwise-protected internal network names. (CVE-2010-3548)\n\nNote: Flaws concerning applets in this advisory (CVE-2010-3568,\nCVE-2010-3554, CVE-2009-3555, CVE-2010-3562, CVE-2010-3557, CVE-2010-3548,\nCVE-2010-3564, CVE-2010-3565, CVE-2010-3569) can only be triggered in\nOpenJDK by calling the \"appletviewer\" application.\n\nBug fixes:\n\n* This update provides one defense in depth patch. (BZ#639922)\n\n* Problems for certain SSL connections. In a reported case, this prevented\nthe JBoss JAAS modules from connecting over SSL to Microsoft Active\nDirectory servers. (BZ#618290)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2010:0768", "url": "https://access.redhat.com/errata/RHSA-2010:0768" }, { "category": "external", "summary": "http://www.redhat.com/security/updates/classification/#important", "url": "http://www.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "https://access.redhat.com/kb/docs/DOC-20491", "url": "https://access.redhat.com/kb/docs/DOC-20491" }, { "category": "external", "summary": "533125", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=533125" }, { "category": "external", "summary": "618290", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=618290" }, { "category": "external", "summary": "639876", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639876" }, { "category": "external", "summary": "639880", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639880" }, { "category": "external", "summary": "639897", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639897" }, { "category": "external", "summary": "639904", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639904" }, { "category": "external", "summary": "639909", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639909" }, { "category": "external", "summary": "639914", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639914" }, { "category": "external", "summary": "639920", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639920" }, { "category": "external", "summary": "639922", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639922" }, { "category": "external", "summary": "639925", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639925" }, { "category": "external", "summary": "642167", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642167" }, { "category": "external", "summary": "642180", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642180" }, { "category": "external", "summary": "642187", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642187" }, { "category": "external", "summary": "642197", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642197" }, { "category": "external", "summary": "642202", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642202" }, { "category": "external", "summary": "642215", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642215" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0768.json" } ], "title": "Red Hat Security Advisory: java-1.6.0-openjdk security and bug fix update", "tracking": { "current_release_date": "2025-10-09T13:41:32+00:00", "generator": { "date": "2025-10-09T13:41:32+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.9" } }, "id": "RHSA-2010:0768", "initial_release_date": "2010-10-13T16:22:00+00:00", "revision_history": [ { "date": "2010-10-13T16:22:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2010-10-13T12:23:43+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-10-09T13:41:32+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop (v. 5 client)", "product": { "name": "Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:5::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux (v. 5 server)", "product": { "name": "Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:5::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "product": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "product_id": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-devel@1.6.0.0-1.16.b17.el5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "product": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "product_id": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-src@1.6.0.0-1.16.b17.el5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "product": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "product_id": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-debuginfo@1.6.0.0-1.16.b17.el5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "product": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "product_id": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-demo@1.6.0.0-1.16.b17.el5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "product": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.16.b17.el5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "product": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "product_id": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-javadoc@1.6.0.0-1.16.b17.el5?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "product": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "product_id": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-devel@1.6.0.0-1.16.b17.el5?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "product": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "product_id": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-src@1.6.0.0-1.16.b17.el5?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "product": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "product_id": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-debuginfo@1.6.0.0-1.16.b17.el5?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "product": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "product_id": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-demo@1.6.0.0-1.16.b17.el5?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "product": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.16.b17.el5?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "product": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "product_id": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-javadoc@1.6.0.0-1.16.b17.el5?arch=i386\u0026epoch=1" } } } ], "category": "architecture", "name": "i386" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "product": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.16.b17.el5?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Server" } ] }, "vulnerabilities": [ { "cve": "CVE-2009-3555", "cwe": { "id": "CWE-300", "name": "Channel Accessible by Non-Endpoint" }, "discovery_date": "2009-10-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "533125" } ], "notes": [ { "category": "description", "text": "The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a \"plaintext injection\" attack, aka the \"Project Mogul\" issue.", "title": "Vulnerability description" }, { "category": "summary", "text": "TLS: MITM attacks via session renegotiation", "title": "Vulnerability summary" }, { "category": "other", "text": "Additional information can be found in the Red Hat Knowledgebase article:\nhttps://access.redhat.com/articles/20490", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-3555" }, { "category": "external", "summary": "RHBZ#533125", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=533125" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3555", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3555" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3555", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3555" } ], "release_date": "2009-11-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "TLS: MITM attacks via session renegotiation" }, { "cve": "CVE-2010-3541", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642202" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3541" }, { "category": "external", "summary": "RHBZ#642202", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642202" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3541", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3541" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3541", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3541" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)" }, { "cve": "CVE-2010-3548", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639909" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this allows remote attackers to determine internal IP addresses or \"otherwise-protected internal network names.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK DNS server IP address information leak (6957564)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3548" }, { "category": "external", "summary": "RHBZ#639909", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639909" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3548", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3548" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3548", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3548" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK DNS server IP address information leak (6957564)" }, { "cve": "CVE-2010-3549", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642180" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is an HTTP request splitting vulnerability involving the handling of the chunked transfer encoding method by the HttpURLConnection class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection request splitting (6952017)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3549" }, { "category": "external", "summary": "RHBZ#642180", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642180" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3549", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3549" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3549", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3549" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK HttpURLConnection request splitting (6952017)" }, { "cve": "CVE-2010-3551", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642187" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK local network address disclosure (6952603)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3551" }, { "category": "external", "summary": "RHBZ#642187", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642187" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3551", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3551" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3551", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3551" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK local network address disclosure (6952603)" }, { "cve": "CVE-2010-3553", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642167" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to unsafe reflection involving the UIDefault.ProxyLazyValue class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Swing unsafe reflection usage (6622002)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3553" }, { "category": "external", "summary": "RHBZ#642167", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642167" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3553", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3553" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3553", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3553" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Swing unsafe reflection usage (6622002)" }, { "cve": "CVE-2010-3554", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639880" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to \"permissions granted to certain system objects.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK corba reflection vulnerabilities (6891766,6925672)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3554" }, { "category": "external", "summary": "RHBZ#639880", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639880" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3554", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3554" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3554", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3554" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK corba reflection vulnerabilities (6891766,6925672)" }, { "cve": "CVE-2010-3557", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639904" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to the modification of \"behavior and state of certain JDK classes\" and \"mutable static.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Swing mutable static (6938813)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3557" }, { "category": "external", "summary": "RHBZ#639904", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639904" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3557", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3557" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3557", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3557" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Swing mutable static (6938813)" }, { "cve": "CVE-2010-3561", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639880" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this involves the use of the privileged accept method in the ServerSocket class, which does not limit which hosts can connect and allows remote attackers to bypass intended network access restrictions.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK corba reflection vulnerabilities (6891766,6925672)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3561" }, { "category": "external", "summary": "RHBZ#639880", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639880" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3561", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3561" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3561", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3561" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK corba reflection vulnerabilities (6891766,6925672)" }, { "cve": "CVE-2010-3562", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639897" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is a double free vulnerability in IndexColorModel that allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK IndexColorModel double-free (6925710)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3562" }, { "category": "external", "summary": "RHBZ#639897", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639897" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3562", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3562" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3562", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3562" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK IndexColorModel double-free (6925710)" }, { "cve": "CVE-2010-3564", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639914" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK kerberos vulnerability (6958060)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3564" }, { "category": "external", "summary": "RHBZ#639914", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639914" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3564", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3564" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3564", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3564" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK kerberos vulnerability (6958060)" }, { "cve": "CVE-2010-3565", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639920" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow that triggers memory corruption via large values in a subsample of a JPEG image, related to JPEGImageWriter.writeImage in the imageio API.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK JPEG writeImage remote code execution (6963023)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3565" }, { "category": "external", "summary": "RHBZ#639920", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639920" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3565", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3565" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3565", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3565" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK JPEG writeImage remote code execution (6963023)" }, { "cve": "CVE-2010-3567", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642197" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to a calculation error in right-to-left text character counts for the ICU OpenType font rendering implementation, which triggers an out-of-bounds memory access.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK ICU Opentype layout engine crash (6963285)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3567" }, { "category": "external", "summary": "RHBZ#642197", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642197" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3567", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3567" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3567", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3567" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK ICU Opentype layout engine crash (6963285)" }, { "cve": "CVE-2010-3568", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639876" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is a race condition related to deserialization.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Deserialization Race condition (6559775)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3568" }, { "category": "external", "summary": "RHBZ#639876", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639876" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3568", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3568" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3568", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3568" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Deserialization Race condition (6559775)" }, { "cve": "CVE-2010-3569", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639925" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this allows remote attackers to execute arbitrary code by causing the defaultReadObject method in the Serialization API to set a volatile field multiple times.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Serialization inconsistencies (6966692)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3569" }, { "category": "external", "summary": "RHBZ#639925", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639925" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3569", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3569" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3569", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3569" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Serialization inconsistencies (6966692)" }, { "cve": "CVE-2010-3573", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642202" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3573" }, { "category": "external", "summary": "RHBZ#642202", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642202" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3573", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3573" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3573", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3573" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)" }, { "cve": "CVE-2010-3574", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642215" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection incomplete TRACE permission check (6981426)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3574" }, { "category": "external", "summary": "RHBZ#642215", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642215" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3574", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3574" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3574", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3574" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK HttpURLConnection incomplete TRACE permission check (6981426)" } ] }
rhsa-2010:0865
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated java-1.6.0-openjdk packages that fix several security issues and\ntwo bugs are now available for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "These packages provide the OpenJDK 6 Java Runtime Environment and the\nOpenJDK 6 Software Development Kit.\n\ndefaultReadObject of the Serialization API could be tricked into setting a\nvolatile field multiple times, which could allow a remote attacker to\nexecute arbitrary code with the privileges of the user running the applet\nor application. (CVE-2010-3569)\n\nRace condition in the way objects were deserialized could allow an\nuntrusted applet or application to misuse the privileges of the user\nrunning the applet or application. (CVE-2010-3568)\n\nMiscalculation in the OpenType font rendering implementation caused\nout-of-bounds memory access, which could allow remote attackers to execute\ncode with the privileges of the user running the java process.\n(CVE-2010-3567)\n\nJPEGImageWriter.writeImage in the imageio API improperly checked certain\nimage metadata, which could allow a remote attacker to execute arbitrary\ncode in the context of the user running the applet or application.\n(CVE-2010-3565)\n\nDouble free in IndexColorModel could cause an untrusted applet or\napplication to crash or, possibly, execute arbitrary code with the\nprivileges of the user running the applet or application. (CVE-2010-3562)\n\nThe privileged accept method of the ServerSocket class in the Common Object\nRequest Broker Architecture (CORBA) implementation in OpenJDK allowed it to\nreceive connections from any host, instead of just the host of the current\nconnection. An attacker could use this flaw to bypass restrictions defined\nby network permissions. (CVE-2010-3561)\n\nFlaws in the Swing library could allow an untrusted application to modify\nthe behavior and state of certain JDK classes. (CVE-2010-3557)\n\nFlaws in the CORBA implementation could allow an attacker to execute\narbitrary code by misusing permissions granted to certain system objects.\n(CVE-2010-3554)\n\nUIDefault.ProxyLazyValue had unsafe reflection usage, allowing untrusted\ncallers to create objects via ProxyLazyValue values. (CVE-2010-3553)\n\nHttpURLConnection improperly handled the \"chunked\" transfer encoding\nmethod, which could allow remote attackers to conduct HTTP response\nsplitting attacks. (CVE-2010-3549)\n\nHttpURLConnection improperly checked whether the calling code was granted\nthe \"allowHttpTrace\" permission, allowing untrusted code to create HTTP\nTRACE requests. (CVE-2010-3574)\n\nHttpURLConnection did not validate request headers set by applets, which\ncould allow remote attackers to trigger actions otherwise restricted to\nHTTP clients. (CVE-2010-3541, CVE-2010-3573)\n\nThe Kerberos implementation improperly checked the sanity of AP-REQ\nrequests, which could cause a denial of service condition in the receiving\nJava Virtual Machine. (CVE-2010-3564)\n\nThe java-1.6.0-openjdk packages shipped with the GA release of Red Hat\nEnterprise Linux 6 mitigated a man-in-the-middle attack in the way the\nTLS/SSL protocols handle session renegotiation by disabling renegotiation.\nThis update implements the TLS Renegotiation Indication Extension as\ndefined in RFC 5746, allowing secure renegotiation between updated clients\nand servers. (CVE-2009-3555)\n\nThe NetworkInterface class improperly checked the network \"connect\"\npermissions for local network addresses, which could allow remote attackers\nto read local network addresses. (CVE-2010-3551)\n\nInformation leak flaw in the Java Naming and Directory Interface (JNDI)\ncould allow a remote attacker to access information about\notherwise-protected internal network names. (CVE-2010-3548)\n\nNote: Flaws concerning applets in this advisory (CVE-2010-3568,\nCVE-2010-3554, CVE-2009-3555, CVE-2010-3562, CVE-2010-3557, CVE-2010-3548,\nCVE-2010-3564, CVE-2010-3565, CVE-2010-3569) can only be triggered in\nOpenJDK by calling the \"appletviewer\" application.\n\nBug fixes:\n\n* One defense in depth patch. (BZ#639922)\n\n* Problems for certain SSL connections. In a reported case, this prevented\nthe JBoss JAAS modules from connecting over SSL to Microsoft Active\nDirectory servers. (BZ#642779)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2010:0865", "url": "https://access.redhat.com/errata/RHSA-2010:0865" }, { "category": "external", "summary": "http://www.redhat.com/security/updates/classification/#important", "url": "http://www.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "https://access.redhat.com/kb/docs/DOC-20491", "url": "https://access.redhat.com/kb/docs/DOC-20491" }, { "category": "external", "summary": "639876", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639876" }, { "category": "external", "summary": "639880", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639880" }, { "category": "external", "summary": "639897", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639897" }, { "category": "external", "summary": "639904", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639904" }, { "category": "external", "summary": "639909", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639909" }, { "category": "external", "summary": "639914", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639914" }, { "category": "external", "summary": "639920", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639920" }, { "category": "external", "summary": "639922", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639922" }, { "category": "external", "summary": "639925", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639925" }, { "category": "external", "summary": "642167", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642167" }, { "category": "external", "summary": "642180", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642180" }, { "category": "external", "summary": "642187", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642187" }, { "category": "external", "summary": "642197", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642197" }, { "category": "external", "summary": "642202", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642202" }, { "category": "external", "summary": "642215", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642215" }, { "category": "external", "summary": "533125", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=533125" }, { "category": "external", "summary": "642779", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642779" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0865.json" } ], "title": "Red Hat Security Advisory: java-1.6.0-openjdk security and bug fix update", "tracking": { "current_release_date": "2025-10-09T13:41:37+00:00", "generator": { "date": "2025-10-09T13:41:37+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.9" } }, "id": "RHSA-2010:0865", "initial_release_date": "2010-11-10T19:00:00+00:00", "revision_history": [ { "date": "2010-11-10T19:00:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2010-11-09T14:05:39+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-10-09T13:41:37+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "product": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.31.b17.el6_0?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "product": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "product_id": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-src@1.6.0.0-1.31.b17.el6_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "product": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "product_id": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-demo@1.6.0.0-1.31.b17.el6_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "product": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "product_id": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-debuginfo@1.6.0.0-1.31.b17.el6_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "product": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "product_id": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-devel@1.6.0.0-1.31.b17.el6_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "product": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.31.b17.el6_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "product": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "product_id": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-javadoc@1.6.0.0-1.31.b17.el6_0?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_id": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-src@1.6.0.0-1.31.b17.el6_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_id": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-demo@1.6.0.0-1.31.b17.el6_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_id": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-debuginfo@1.6.0.0-1.31.b17.el6_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.31.b17.el6_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_id": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-devel@1.6.0.0-1.31.b17.el6_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_id": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-javadoc@1.6.0.0-1.31.b17.el6_0?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation" } ] }, "vulnerabilities": [ { "cve": "CVE-2009-3555", "cwe": { "id": "CWE-300", "name": "Channel Accessible by Non-Endpoint" }, "discovery_date": "2009-10-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "533125" } ], "notes": [ { "category": "description", "text": "The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a \"plaintext injection\" attack, aka the \"Project Mogul\" issue.", "title": "Vulnerability description" }, { "category": "summary", "text": "TLS: MITM attacks via session renegotiation", "title": "Vulnerability summary" }, { "category": "other", "text": "Additional information can be found in the Red Hat Knowledgebase article:\nhttps://access.redhat.com/articles/20490", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-3555" }, { "category": "external", "summary": "RHBZ#533125", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=533125" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3555", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3555" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3555", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3555" } ], "release_date": "2009-11-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "TLS: MITM attacks via session renegotiation" }, { "cve": "CVE-2010-3541", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642202" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3541" }, { "category": "external", "summary": "RHBZ#642202", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642202" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3541", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3541" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3541", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3541" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)" }, { "cve": "CVE-2010-3548", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639909" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this allows remote attackers to determine internal IP addresses or \"otherwise-protected internal network names.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK DNS server IP address information leak (6957564)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3548" }, { "category": "external", "summary": "RHBZ#639909", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639909" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3548", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3548" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3548", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3548" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK DNS server IP address information leak (6957564)" }, { "cve": "CVE-2010-3549", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642180" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is an HTTP request splitting vulnerability involving the handling of the chunked transfer encoding method by the HttpURLConnection class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection request splitting (6952017)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3549" }, { "category": "external", "summary": "RHBZ#642180", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642180" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3549", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3549" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3549", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3549" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK HttpURLConnection request splitting (6952017)" }, { "cve": "CVE-2010-3551", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642187" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK local network address disclosure (6952603)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3551" }, { "category": "external", "summary": "RHBZ#642187", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642187" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3551", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3551" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3551", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3551" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK local network address disclosure (6952603)" }, { "cve": "CVE-2010-3553", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642167" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to unsafe reflection involving the UIDefault.ProxyLazyValue class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Swing unsafe reflection usage (6622002)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3553" }, { "category": "external", "summary": "RHBZ#642167", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642167" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3553", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3553" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3553", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3553" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Swing unsafe reflection usage (6622002)" }, { "cve": "CVE-2010-3554", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639880" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to \"permissions granted to certain system objects.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK corba reflection vulnerabilities (6891766,6925672)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3554" }, { "category": "external", "summary": "RHBZ#639880", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639880" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3554", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3554" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3554", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3554" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK corba reflection vulnerabilities (6891766,6925672)" }, { "cve": "CVE-2010-3557", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639904" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to the modification of \"behavior and state of certain JDK classes\" and \"mutable static.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Swing mutable static (6938813)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3557" }, { "category": "external", "summary": "RHBZ#639904", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639904" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3557", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3557" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3557", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3557" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Swing mutable static (6938813)" }, { "cve": "CVE-2010-3561", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639880" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this involves the use of the privileged accept method in the ServerSocket class, which does not limit which hosts can connect and allows remote attackers to bypass intended network access restrictions.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK corba reflection vulnerabilities (6891766,6925672)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3561" }, { "category": "external", "summary": "RHBZ#639880", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639880" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3561", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3561" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3561", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3561" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK corba reflection vulnerabilities (6891766,6925672)" }, { "cve": "CVE-2010-3562", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639897" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is a double free vulnerability in IndexColorModel that allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK IndexColorModel double-free (6925710)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3562" }, { "category": "external", "summary": "RHBZ#639897", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639897" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3562", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3562" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3562", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3562" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK IndexColorModel double-free (6925710)" }, { "cve": "CVE-2010-3564", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639914" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK kerberos vulnerability (6958060)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3564" }, { "category": "external", "summary": "RHBZ#639914", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639914" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3564", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3564" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3564", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3564" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK kerberos vulnerability (6958060)" }, { "cve": "CVE-2010-3565", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639920" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow that triggers memory corruption via large values in a subsample of a JPEG image, related to JPEGImageWriter.writeImage in the imageio API.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK JPEG writeImage remote code execution (6963023)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3565" }, { "category": "external", "summary": "RHBZ#639920", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639920" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3565", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3565" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3565", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3565" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK JPEG writeImage remote code execution (6963023)" }, { "cve": "CVE-2010-3567", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642197" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to a calculation error in right-to-left text character counts for the ICU OpenType font rendering implementation, which triggers an out-of-bounds memory access.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK ICU Opentype layout engine crash (6963285)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3567" }, { "category": "external", "summary": "RHBZ#642197", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642197" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3567", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3567" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3567", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3567" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK ICU Opentype layout engine crash (6963285)" }, { "cve": "CVE-2010-3568", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639876" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is a race condition related to deserialization.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Deserialization Race condition (6559775)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3568" }, { "category": "external", "summary": "RHBZ#639876", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639876" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3568", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3568" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3568", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3568" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Deserialization Race condition (6559775)" }, { "cve": "CVE-2010-3569", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639925" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this allows remote attackers to execute arbitrary code by causing the defaultReadObject method in the Serialization API to set a volatile field multiple times.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Serialization inconsistencies (6966692)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3569" }, { "category": "external", "summary": "RHBZ#639925", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639925" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3569", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3569" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3569", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3569" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Serialization inconsistencies (6966692)" }, { "cve": "CVE-2010-3573", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642202" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3573" }, { "category": "external", "summary": "RHBZ#642202", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642202" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3573", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3573" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3573", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3573" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)" }, { "cve": "CVE-2010-3574", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642215" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection incomplete TRACE permission check (6981426)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3574" }, { "category": "external", "summary": "RHBZ#642215", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642215" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3574", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3574" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3574", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3574" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK HttpURLConnection incomplete TRACE permission check (6981426)" } ] }
RHSA-2010:0768
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated java-1.6.0-openjdk packages that fix several security issues and\ntwo bugs are now available for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "These packages provide the OpenJDK 6 Java Runtime Environment and the\nOpenJDK 6 Software Development Kit.\n\ndefaultReadObject of the Serialization API could be tricked into setting a\nvolatile field multiple times, which could allow a remote attacker to\nexecute arbitrary code with the privileges of the user running the applet\nor application. (CVE-2010-3569)\n\nRace condition in the way objects were deserialized could allow an\nuntrusted applet or application to misuse the privileges of the user\nrunning the applet or application. (CVE-2010-3568)\n\nMiscalculation in the OpenType font rendering implementation caused\nout-of-bounds memory access, which could allow remote attackers to execute\ncode with the privileges of the user running the java process.\n(CVE-2010-3567)\n\nJPEGImageWriter.writeImage in the imageio API improperly checked certain\nimage metadata, which could allow a remote attacker to execute arbitrary\ncode in the context of the user running the applet or application.\n(CVE-2010-3565)\n\nDouble free in IndexColorModel could cause an untrusted applet or\napplication to crash or, possibly, execute arbitrary code with the\nprivileges of the user running the applet or application. (CVE-2010-3562)\n\nThe privileged accept method of the ServerSocket class in the Common Object\nRequest Broker Architecture (CORBA) implementation in OpenJDK allowed it to\nreceive connections from any host, instead of just the host of the current\nconnection. An attacker could use this flaw to bypass restrictions defined\nby network permissions. (CVE-2010-3561)\n\nFlaws in the Swing library could allow an untrusted application to modify\nthe behavior and state of certain JDK classes. (CVE-2010-3557)\n\nFlaws in the CORBA implementation could allow an attacker to execute\narbitrary code by misusing permissions granted to certain system objects.\n(CVE-2010-3554)\n\nUIDefault.ProxyLazyValue had unsafe reflection usage, allowing untrusted\ncallers to create objects via ProxyLazyValue values. (CVE-2010-3553)\n\nHttpURLConnection improperly handled the \"chunked\" transfer encoding\nmethod, which could allow remote attackers to conduct HTTP response\nsplitting attacks. (CVE-2010-3549)\n\nHttpURLConnection improperly checked whether the calling code was granted\nthe \"allowHttpTrace\" permission, allowing untrusted code to create HTTP\nTRACE requests. (CVE-2010-3574)\n\nHttpURLConnection did not validate request headers set by applets, which\ncould allow remote attackers to trigger actions otherwise restricted to\nHTTP clients. (CVE-2010-3541, CVE-2010-3573)\n\nThe Kerberos implementation improperly checked the sanity of AP-REQ\nrequests, which could cause a denial of service condition in the receiving\nJava Virtual Machine. (CVE-2010-3564)\n\nThe RHSA-2010:0339 update mitigated a man-in-the-middle attack in the way\nthe TLS/SSL (Transport Layer Security/Secure Sockets Layer) protocols\nhandle session renegotiation by disabling renegotiation. This update\nimplements the TLS Renegotiation Indication Extension as defined in RFC\n5746, allowing secure renegotiation between updated clients and servers.\n(CVE-2009-3555)\n\nThe NetworkInterface class improperly checked the network \"connect\"\npermissions for local network addresses, which could allow remote attackers\nto read local network addresses. (CVE-2010-3551)\n\nInformation leak flaw in the Java Naming and Directory Interface (JNDI)\ncould allow a remote attacker to access information about\notherwise-protected internal network names. (CVE-2010-3548)\n\nNote: Flaws concerning applets in this advisory (CVE-2010-3568,\nCVE-2010-3554, CVE-2009-3555, CVE-2010-3562, CVE-2010-3557, CVE-2010-3548,\nCVE-2010-3564, CVE-2010-3565, CVE-2010-3569) can only be triggered in\nOpenJDK by calling the \"appletviewer\" application.\n\nBug fixes:\n\n* This update provides one defense in depth patch. (BZ#639922)\n\n* Problems for certain SSL connections. In a reported case, this prevented\nthe JBoss JAAS modules from connecting over SSL to Microsoft Active\nDirectory servers. (BZ#618290)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2010:0768", "url": "https://access.redhat.com/errata/RHSA-2010:0768" }, { "category": "external", "summary": "http://www.redhat.com/security/updates/classification/#important", "url": "http://www.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "https://access.redhat.com/kb/docs/DOC-20491", "url": "https://access.redhat.com/kb/docs/DOC-20491" }, { "category": "external", "summary": "533125", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=533125" }, { "category": "external", "summary": "618290", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=618290" }, { "category": "external", "summary": "639876", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639876" }, { "category": "external", "summary": "639880", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639880" }, { "category": "external", "summary": "639897", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639897" }, { "category": "external", "summary": "639904", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639904" }, { "category": "external", "summary": "639909", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639909" }, { "category": "external", "summary": "639914", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639914" }, { "category": "external", "summary": "639920", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639920" }, { "category": "external", "summary": "639922", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639922" }, { "category": "external", "summary": "639925", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639925" }, { "category": "external", "summary": "642167", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642167" }, { "category": "external", "summary": "642180", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642180" }, { "category": "external", "summary": "642187", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642187" }, { "category": "external", "summary": "642197", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642197" }, { "category": "external", "summary": "642202", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642202" }, { "category": "external", "summary": "642215", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642215" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0768.json" } ], "title": "Red Hat Security Advisory: java-1.6.0-openjdk security and bug fix update", "tracking": { "current_release_date": "2025-10-09T13:41:32+00:00", "generator": { "date": "2025-10-09T13:41:32+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.9" } }, "id": "RHSA-2010:0768", "initial_release_date": "2010-10-13T16:22:00+00:00", "revision_history": [ { "date": "2010-10-13T16:22:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2010-10-13T12:23:43+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-10-09T13:41:32+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop (v. 5 client)", "product": { "name": "Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:5::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux (v. 5 server)", "product": { "name": "Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:5::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "product": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "product_id": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-devel@1.6.0.0-1.16.b17.el5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "product": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "product_id": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-src@1.6.0.0-1.16.b17.el5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "product": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "product_id": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-debuginfo@1.6.0.0-1.16.b17.el5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "product": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "product_id": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-demo@1.6.0.0-1.16.b17.el5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "product": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.16.b17.el5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "product": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "product_id": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-javadoc@1.6.0.0-1.16.b17.el5?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "product": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "product_id": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-devel@1.6.0.0-1.16.b17.el5?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "product": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "product_id": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-src@1.6.0.0-1.16.b17.el5?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "product": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "product_id": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-debuginfo@1.6.0.0-1.16.b17.el5?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "product": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "product_id": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-demo@1.6.0.0-1.16.b17.el5?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "product": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.16.b17.el5?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "product": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "product_id": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-javadoc@1.6.0.0-1.16.b17.el5?arch=i386\u0026epoch=1" } } } ], "category": "architecture", "name": "i386" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "product": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.16.b17.el5?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Server" } ] }, "vulnerabilities": [ { "cve": "CVE-2009-3555", "cwe": { "id": "CWE-300", "name": "Channel Accessible by Non-Endpoint" }, "discovery_date": "2009-10-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "533125" } ], "notes": [ { "category": "description", "text": "The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a \"plaintext injection\" attack, aka the \"Project Mogul\" issue.", "title": "Vulnerability description" }, { "category": "summary", "text": "TLS: MITM attacks via session renegotiation", "title": "Vulnerability summary" }, { "category": "other", "text": "Additional information can be found in the Red Hat Knowledgebase article:\nhttps://access.redhat.com/articles/20490", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-3555" }, { "category": "external", "summary": "RHBZ#533125", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=533125" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3555", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3555" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3555", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3555" } ], "release_date": "2009-11-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "TLS: MITM attacks via session renegotiation" }, { "cve": "CVE-2010-3541", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642202" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3541" }, { "category": "external", "summary": "RHBZ#642202", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642202" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3541", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3541" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3541", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3541" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)" }, { "cve": "CVE-2010-3548", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639909" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this allows remote attackers to determine internal IP addresses or \"otherwise-protected internal network names.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK DNS server IP address information leak (6957564)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3548" }, { "category": "external", "summary": "RHBZ#639909", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639909" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3548", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3548" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3548", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3548" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK DNS server IP address information leak (6957564)" }, { "cve": "CVE-2010-3549", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642180" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is an HTTP request splitting vulnerability involving the handling of the chunked transfer encoding method by the HttpURLConnection class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection request splitting (6952017)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3549" }, { "category": "external", "summary": "RHBZ#642180", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642180" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3549", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3549" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3549", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3549" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK HttpURLConnection request splitting (6952017)" }, { "cve": "CVE-2010-3551", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642187" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK local network address disclosure (6952603)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3551" }, { "category": "external", "summary": "RHBZ#642187", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642187" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3551", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3551" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3551", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3551" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK local network address disclosure (6952603)" }, { "cve": "CVE-2010-3553", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642167" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to unsafe reflection involving the UIDefault.ProxyLazyValue class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Swing unsafe reflection usage (6622002)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3553" }, { "category": "external", "summary": "RHBZ#642167", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642167" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3553", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3553" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3553", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3553" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Swing unsafe reflection usage (6622002)" }, { "cve": "CVE-2010-3554", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639880" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to \"permissions granted to certain system objects.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK corba reflection vulnerabilities (6891766,6925672)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3554" }, { "category": "external", "summary": "RHBZ#639880", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639880" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3554", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3554" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3554", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3554" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK corba reflection vulnerabilities (6891766,6925672)" }, { "cve": "CVE-2010-3557", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639904" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to the modification of \"behavior and state of certain JDK classes\" and \"mutable static.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Swing mutable static (6938813)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3557" }, { "category": "external", "summary": "RHBZ#639904", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639904" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3557", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3557" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3557", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3557" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Swing mutable static (6938813)" }, { "cve": "CVE-2010-3561", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639880" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this involves the use of the privileged accept method in the ServerSocket class, which does not limit which hosts can connect and allows remote attackers to bypass intended network access restrictions.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK corba reflection vulnerabilities (6891766,6925672)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3561" }, { "category": "external", "summary": "RHBZ#639880", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639880" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3561", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3561" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3561", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3561" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK corba reflection vulnerabilities (6891766,6925672)" }, { "cve": "CVE-2010-3562", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639897" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is a double free vulnerability in IndexColorModel that allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK IndexColorModel double-free (6925710)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3562" }, { "category": "external", "summary": "RHBZ#639897", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639897" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3562", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3562" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3562", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3562" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK IndexColorModel double-free (6925710)" }, { "cve": "CVE-2010-3564", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639914" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK kerberos vulnerability (6958060)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3564" }, { "category": "external", "summary": "RHBZ#639914", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639914" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3564", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3564" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3564", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3564" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK kerberos vulnerability (6958060)" }, { "cve": "CVE-2010-3565", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639920" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow that triggers memory corruption via large values in a subsample of a JPEG image, related to JPEGImageWriter.writeImage in the imageio API.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK JPEG writeImage remote code execution (6963023)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3565" }, { "category": "external", "summary": "RHBZ#639920", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639920" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3565", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3565" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3565", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3565" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK JPEG writeImage remote code execution (6963023)" }, { "cve": "CVE-2010-3567", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642197" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to a calculation error in right-to-left text character counts for the ICU OpenType font rendering implementation, which triggers an out-of-bounds memory access.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK ICU Opentype layout engine crash (6963285)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3567" }, { "category": "external", "summary": "RHBZ#642197", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642197" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3567", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3567" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3567", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3567" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK ICU Opentype layout engine crash (6963285)" }, { "cve": "CVE-2010-3568", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639876" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is a race condition related to deserialization.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Deserialization Race condition (6559775)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3568" }, { "category": "external", "summary": "RHBZ#639876", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639876" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3568", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3568" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3568", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3568" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Deserialization Race condition (6559775)" }, { "cve": "CVE-2010-3569", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639925" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this allows remote attackers to execute arbitrary code by causing the defaultReadObject method in the Serialization API to set a volatile field multiple times.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Serialization inconsistencies (6966692)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3569" }, { "category": "external", "summary": "RHBZ#639925", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639925" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3569", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3569" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3569", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3569" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Serialization inconsistencies (6966692)" }, { "cve": "CVE-2010-3573", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642202" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3573" }, { "category": "external", "summary": "RHBZ#642202", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642202" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3573", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3573" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3573", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3573" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)" }, { "cve": "CVE-2010-3574", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642215" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection incomplete TRACE permission check (6981426)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3574" }, { "category": "external", "summary": "RHBZ#642215", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642215" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3574", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3574" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3574", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3574" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK HttpURLConnection incomplete TRACE permission check (6981426)" } ] }
rhsa-2010_0768
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated java-1.6.0-openjdk packages that fix several security issues and\ntwo bugs are now available for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "These packages provide the OpenJDK 6 Java Runtime Environment and the\nOpenJDK 6 Software Development Kit.\n\ndefaultReadObject of the Serialization API could be tricked into setting a\nvolatile field multiple times, which could allow a remote attacker to\nexecute arbitrary code with the privileges of the user running the applet\nor application. (CVE-2010-3569)\n\nRace condition in the way objects were deserialized could allow an\nuntrusted applet or application to misuse the privileges of the user\nrunning the applet or application. (CVE-2010-3568)\n\nMiscalculation in the OpenType font rendering implementation caused\nout-of-bounds memory access, which could allow remote attackers to execute\ncode with the privileges of the user running the java process.\n(CVE-2010-3567)\n\nJPEGImageWriter.writeImage in the imageio API improperly checked certain\nimage metadata, which could allow a remote attacker to execute arbitrary\ncode in the context of the user running the applet or application.\n(CVE-2010-3565)\n\nDouble free in IndexColorModel could cause an untrusted applet or\napplication to crash or, possibly, execute arbitrary code with the\nprivileges of the user running the applet or application. (CVE-2010-3562)\n\nThe privileged accept method of the ServerSocket class in the Common Object\nRequest Broker Architecture (CORBA) implementation in OpenJDK allowed it to\nreceive connections from any host, instead of just the host of the current\nconnection. An attacker could use this flaw to bypass restrictions defined\nby network permissions. (CVE-2010-3561)\n\nFlaws in the Swing library could allow an untrusted application to modify\nthe behavior and state of certain JDK classes. (CVE-2010-3557)\n\nFlaws in the CORBA implementation could allow an attacker to execute\narbitrary code by misusing permissions granted to certain system objects.\n(CVE-2010-3554)\n\nUIDefault.ProxyLazyValue had unsafe reflection usage, allowing untrusted\ncallers to create objects via ProxyLazyValue values. (CVE-2010-3553)\n\nHttpURLConnection improperly handled the \"chunked\" transfer encoding\nmethod, which could allow remote attackers to conduct HTTP response\nsplitting attacks. (CVE-2010-3549)\n\nHttpURLConnection improperly checked whether the calling code was granted\nthe \"allowHttpTrace\" permission, allowing untrusted code to create HTTP\nTRACE requests. (CVE-2010-3574)\n\nHttpURLConnection did not validate request headers set by applets, which\ncould allow remote attackers to trigger actions otherwise restricted to\nHTTP clients. (CVE-2010-3541, CVE-2010-3573)\n\nThe Kerberos implementation improperly checked the sanity of AP-REQ\nrequests, which could cause a denial of service condition in the receiving\nJava Virtual Machine. (CVE-2010-3564)\n\nThe RHSA-2010:0339 update mitigated a man-in-the-middle attack in the way\nthe TLS/SSL (Transport Layer Security/Secure Sockets Layer) protocols\nhandle session renegotiation by disabling renegotiation. This update\nimplements the TLS Renegotiation Indication Extension as defined in RFC\n5746, allowing secure renegotiation between updated clients and servers.\n(CVE-2009-3555)\n\nThe NetworkInterface class improperly checked the network \"connect\"\npermissions for local network addresses, which could allow remote attackers\nto read local network addresses. (CVE-2010-3551)\n\nInformation leak flaw in the Java Naming and Directory Interface (JNDI)\ncould allow a remote attacker to access information about\notherwise-protected internal network names. (CVE-2010-3548)\n\nNote: Flaws concerning applets in this advisory (CVE-2010-3568,\nCVE-2010-3554, CVE-2009-3555, CVE-2010-3562, CVE-2010-3557, CVE-2010-3548,\nCVE-2010-3564, CVE-2010-3565, CVE-2010-3569) can only be triggered in\nOpenJDK by calling the \"appletviewer\" application.\n\nBug fixes:\n\n* This update provides one defense in depth patch. (BZ#639922)\n\n* Problems for certain SSL connections. In a reported case, this prevented\nthe JBoss JAAS modules from connecting over SSL to Microsoft Active\nDirectory servers. (BZ#618290)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2010:0768", "url": "https://access.redhat.com/errata/RHSA-2010:0768" }, { "category": "external", "summary": "http://www.redhat.com/security/updates/classification/#important", "url": "http://www.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "https://access.redhat.com/kb/docs/DOC-20491", "url": "https://access.redhat.com/kb/docs/DOC-20491" }, { "category": "external", "summary": "533125", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=533125" }, { "category": "external", "summary": "618290", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=618290" }, { "category": "external", "summary": "639876", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639876" }, { "category": "external", "summary": "639880", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639880" }, { "category": "external", "summary": "639897", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639897" }, { "category": "external", "summary": "639904", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639904" }, { "category": "external", "summary": "639909", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639909" }, { "category": "external", "summary": "639914", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639914" }, { "category": "external", "summary": "639920", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639920" }, { "category": "external", "summary": "639922", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639922" }, { "category": "external", "summary": "639925", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639925" }, { "category": "external", "summary": "642167", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642167" }, { "category": "external", "summary": "642180", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642180" }, { "category": "external", "summary": "642187", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642187" }, { "category": "external", "summary": "642197", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642197" }, { "category": "external", "summary": "642202", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642202" }, { "category": "external", "summary": "642215", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642215" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0768.json" } ], "title": "Red Hat Security Advisory: java-1.6.0-openjdk security and bug fix update", "tracking": { "current_release_date": "2024-11-22T03:45:04+00:00", "generator": { "date": "2024-11-22T03:45:04+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2010:0768", "initial_release_date": "2010-10-13T16:22:00+00:00", "revision_history": [ { "date": "2010-10-13T16:22:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2010-10-13T12:23:43+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T03:45:04+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop (v. 5 client)", "product": { "name": "Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:5::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux (v. 5 server)", "product": { "name": "Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:5::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "product": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "product_id": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-devel@1.6.0.0-1.16.b17.el5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "product": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "product_id": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-src@1.6.0.0-1.16.b17.el5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "product": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "product_id": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-debuginfo@1.6.0.0-1.16.b17.el5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "product": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "product_id": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-demo@1.6.0.0-1.16.b17.el5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "product": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.16.b17.el5?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "product": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "product_id": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-javadoc@1.6.0.0-1.16.b17.el5?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "product": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "product_id": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-devel@1.6.0.0-1.16.b17.el5?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "product": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "product_id": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-src@1.6.0.0-1.16.b17.el5?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "product": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "product_id": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-debuginfo@1.6.0.0-1.16.b17.el5?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "product": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "product_id": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-demo@1.6.0.0-1.16.b17.el5?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "product": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.16.b17.el5?arch=i386\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "product": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "product_id": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-javadoc@1.6.0.0-1.16.b17.el5?arch=i386\u0026epoch=1" } } } ], "category": "architecture", "name": "i386" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "product": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.16.b17.el5?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "relates_to_product_reference": "5Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "relates_to_product_reference": "5Server" } ] }, "vulnerabilities": [ { "cve": "CVE-2009-3555", "cwe": { "id": "CWE-300", "name": "Channel Accessible by Non-Endpoint" }, "discovery_date": "2009-10-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "533125" } ], "notes": [ { "category": "description", "text": "The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a \"plaintext injection\" attack, aka the \"Project Mogul\" issue.", "title": "Vulnerability description" }, { "category": "summary", "text": "TLS: MITM attacks via session renegotiation", "title": "Vulnerability summary" }, { "category": "other", "text": "Additional information can be found in the Red Hat Knowledgebase article:\nhttps://access.redhat.com/articles/20490", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-3555" }, { "category": "external", "summary": "RHBZ#533125", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=533125" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3555", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3555" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3555", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3555" } ], "release_date": "2009-11-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "TLS: MITM attacks via session renegotiation" }, { "cve": "CVE-2010-3541", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642202" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3541" }, { "category": "external", "summary": "RHBZ#642202", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642202" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3541", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3541" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3541", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3541" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)" }, { "cve": "CVE-2010-3548", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639909" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this allows remote attackers to determine internal IP addresses or \"otherwise-protected internal network names.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK DNS server IP address information leak (6957564)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3548" }, { "category": "external", "summary": "RHBZ#639909", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639909" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3548", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3548" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3548", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3548" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK DNS server IP address information leak (6957564)" }, { "cve": "CVE-2010-3549", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642180" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is an HTTP request splitting vulnerability involving the handling of the chunked transfer encoding method by the HttpURLConnection class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection request splitting (6952017)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3549" }, { "category": "external", "summary": "RHBZ#642180", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642180" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3549", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3549" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3549", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3549" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK HttpURLConnection request splitting (6952017)" }, { "cve": "CVE-2010-3551", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642187" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK local network address disclosure (6952603)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3551" }, { "category": "external", "summary": "RHBZ#642187", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642187" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3551", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3551" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3551", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3551" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK local network address disclosure (6952603)" }, { "cve": "CVE-2010-3553", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642167" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to unsafe reflection involving the UIDefault.ProxyLazyValue class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Swing unsafe reflection usage (6622002)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3553" }, { "category": "external", "summary": "RHBZ#642167", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642167" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3553", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3553" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3553", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3553" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Swing unsafe reflection usage (6622002)" }, { "cve": "CVE-2010-3554", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639880" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to \"permissions granted to certain system objects.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK corba reflection vulnerabilities (6891766,6925672)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3554" }, { "category": "external", "summary": "RHBZ#639880", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639880" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3554", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3554" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3554", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3554" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK corba reflection vulnerabilities (6891766,6925672)" }, { "cve": "CVE-2010-3557", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639904" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to the modification of \"behavior and state of certain JDK classes\" and \"mutable static.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Swing mutable static (6938813)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3557" }, { "category": "external", "summary": "RHBZ#639904", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639904" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3557", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3557" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3557", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3557" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Swing mutable static (6938813)" }, { "cve": "CVE-2010-3561", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639880" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this involves the use of the privileged accept method in the ServerSocket class, which does not limit which hosts can connect and allows remote attackers to bypass intended network access restrictions.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK corba reflection vulnerabilities (6891766,6925672)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3561" }, { "category": "external", "summary": "RHBZ#639880", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639880" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3561", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3561" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3561", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3561" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK corba reflection vulnerabilities (6891766,6925672)" }, { "cve": "CVE-2010-3562", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639897" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is a double free vulnerability in IndexColorModel that allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK IndexColorModel double-free (6925710)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3562" }, { "category": "external", "summary": "RHBZ#639897", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639897" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3562", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3562" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3562", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3562" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK IndexColorModel double-free (6925710)" }, { "cve": "CVE-2010-3564", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639914" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK kerberos vulnerability (6958060)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3564" }, { "category": "external", "summary": "RHBZ#639914", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639914" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3564", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3564" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3564", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3564" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK kerberos vulnerability (6958060)" }, { "cve": "CVE-2010-3565", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639920" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow that triggers memory corruption via large values in a subsample of a JPEG image, related to JPEGImageWriter.writeImage in the imageio API.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK JPEG writeImage remote code execution (6963023)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3565" }, { "category": "external", "summary": "RHBZ#639920", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639920" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3565", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3565" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3565", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3565" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK JPEG writeImage remote code execution (6963023)" }, { "cve": "CVE-2010-3567", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642197" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to a calculation error in right-to-left text character counts for the ICU OpenType font rendering implementation, which triggers an out-of-bounds memory access.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK ICU Opentype layout engine crash (6963285)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3567" }, { "category": "external", "summary": "RHBZ#642197", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642197" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3567", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3567" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3567", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3567" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK ICU Opentype layout engine crash (6963285)" }, { "cve": "CVE-2010-3568", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639876" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is a race condition related to deserialization.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Deserialization Race condition (6559775)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3568" }, { "category": "external", "summary": "RHBZ#639876", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639876" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3568", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3568" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3568", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3568" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Deserialization Race condition (6559775)" }, { "cve": "CVE-2010-3569", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639925" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this allows remote attackers to execute arbitrary code by causing the defaultReadObject method in the Serialization API to set a volatile field multiple times.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Serialization inconsistencies (6966692)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3569" }, { "category": "external", "summary": "RHBZ#639925", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639925" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3569", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3569" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3569", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3569" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Serialization inconsistencies (6966692)" }, { "cve": "CVE-2010-3573", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642202" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3573" }, { "category": "external", "summary": "RHBZ#642202", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642202" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3573", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3573" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3573", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3573" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)" }, { "cve": "CVE-2010-3574", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642215" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection incomplete TRACE permission check (6981426)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3574" }, { "category": "external", "summary": "RHBZ#642215", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642215" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3574", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3574" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3574", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3574" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-10-13T16:22:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0768" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Client:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.src", "5Server:java-1.6.0-openjdk-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.16.b17.el5.x86_64", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.i386", "5Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.16.b17.el5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK HttpURLConnection incomplete TRACE permission check (6981426)" } ] }
rhsa-2010_0865
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated java-1.6.0-openjdk packages that fix several security issues and\ntwo bugs are now available for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "These packages provide the OpenJDK 6 Java Runtime Environment and the\nOpenJDK 6 Software Development Kit.\n\ndefaultReadObject of the Serialization API could be tricked into setting a\nvolatile field multiple times, which could allow a remote attacker to\nexecute arbitrary code with the privileges of the user running the applet\nor application. (CVE-2010-3569)\n\nRace condition in the way objects were deserialized could allow an\nuntrusted applet or application to misuse the privileges of the user\nrunning the applet or application. (CVE-2010-3568)\n\nMiscalculation in the OpenType font rendering implementation caused\nout-of-bounds memory access, which could allow remote attackers to execute\ncode with the privileges of the user running the java process.\n(CVE-2010-3567)\n\nJPEGImageWriter.writeImage in the imageio API improperly checked certain\nimage metadata, which could allow a remote attacker to execute arbitrary\ncode in the context of the user running the applet or application.\n(CVE-2010-3565)\n\nDouble free in IndexColorModel could cause an untrusted applet or\napplication to crash or, possibly, execute arbitrary code with the\nprivileges of the user running the applet or application. (CVE-2010-3562)\n\nThe privileged accept method of the ServerSocket class in the Common Object\nRequest Broker Architecture (CORBA) implementation in OpenJDK allowed it to\nreceive connections from any host, instead of just the host of the current\nconnection. An attacker could use this flaw to bypass restrictions defined\nby network permissions. (CVE-2010-3561)\n\nFlaws in the Swing library could allow an untrusted application to modify\nthe behavior and state of certain JDK classes. (CVE-2010-3557)\n\nFlaws in the CORBA implementation could allow an attacker to execute\narbitrary code by misusing permissions granted to certain system objects.\n(CVE-2010-3554)\n\nUIDefault.ProxyLazyValue had unsafe reflection usage, allowing untrusted\ncallers to create objects via ProxyLazyValue values. (CVE-2010-3553)\n\nHttpURLConnection improperly handled the \"chunked\" transfer encoding\nmethod, which could allow remote attackers to conduct HTTP response\nsplitting attacks. (CVE-2010-3549)\n\nHttpURLConnection improperly checked whether the calling code was granted\nthe \"allowHttpTrace\" permission, allowing untrusted code to create HTTP\nTRACE requests. (CVE-2010-3574)\n\nHttpURLConnection did not validate request headers set by applets, which\ncould allow remote attackers to trigger actions otherwise restricted to\nHTTP clients. (CVE-2010-3541, CVE-2010-3573)\n\nThe Kerberos implementation improperly checked the sanity of AP-REQ\nrequests, which could cause a denial of service condition in the receiving\nJava Virtual Machine. (CVE-2010-3564)\n\nThe java-1.6.0-openjdk packages shipped with the GA release of Red Hat\nEnterprise Linux 6 mitigated a man-in-the-middle attack in the way the\nTLS/SSL protocols handle session renegotiation by disabling renegotiation.\nThis update implements the TLS Renegotiation Indication Extension as\ndefined in RFC 5746, allowing secure renegotiation between updated clients\nand servers. (CVE-2009-3555)\n\nThe NetworkInterface class improperly checked the network \"connect\"\npermissions for local network addresses, which could allow remote attackers\nto read local network addresses. (CVE-2010-3551)\n\nInformation leak flaw in the Java Naming and Directory Interface (JNDI)\ncould allow a remote attacker to access information about\notherwise-protected internal network names. (CVE-2010-3548)\n\nNote: Flaws concerning applets in this advisory (CVE-2010-3568,\nCVE-2010-3554, CVE-2009-3555, CVE-2010-3562, CVE-2010-3557, CVE-2010-3548,\nCVE-2010-3564, CVE-2010-3565, CVE-2010-3569) can only be triggered in\nOpenJDK by calling the \"appletviewer\" application.\n\nBug fixes:\n\n* One defense in depth patch. (BZ#639922)\n\n* Problems for certain SSL connections. In a reported case, this prevented\nthe JBoss JAAS modules from connecting over SSL to Microsoft Active\nDirectory servers. (BZ#642779)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2010:0865", "url": "https://access.redhat.com/errata/RHSA-2010:0865" }, { "category": "external", "summary": "http://www.redhat.com/security/updates/classification/#important", "url": "http://www.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "https://access.redhat.com/kb/docs/DOC-20491", "url": "https://access.redhat.com/kb/docs/DOC-20491" }, { "category": "external", "summary": "533125", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=533125" }, { "category": "external", "summary": "639876", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639876" }, { "category": "external", "summary": "639880", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639880" }, { "category": "external", "summary": "639897", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639897" }, { "category": "external", "summary": "639904", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639904" }, { "category": "external", "summary": "639909", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639909" }, { "category": "external", "summary": "639914", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639914" }, { "category": "external", "summary": "639920", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639920" }, { "category": "external", "summary": "639922", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639922" }, { "category": "external", "summary": "639925", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639925" }, { "category": "external", "summary": "642167", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642167" }, { "category": "external", "summary": "642180", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642180" }, { "category": "external", "summary": "642187", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642187" }, { "category": "external", "summary": "642197", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642197" }, { "category": "external", "summary": "642202", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642202" }, { "category": "external", "summary": "642215", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642215" }, { "category": "external", "summary": "642779", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642779" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0865.json" } ], "title": "Red Hat Security Advisory: java-1.6.0-openjdk security and bug fix update", "tracking": { "current_release_date": "2024-11-22T03:45:08+00:00", "generator": { "date": "2024-11-22T03:45:08+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2010:0865", "initial_release_date": "2010-11-10T19:00:00+00:00", "revision_history": [ { "date": "2010-11-10T19:00:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2010-11-09T14:05:39+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T03:45:08+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "product": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.31.b17.el6_0?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "product": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "product_id": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-src@1.6.0.0-1.31.b17.el6_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "product": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "product_id": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-demo@1.6.0.0-1.31.b17.el6_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "product": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "product_id": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-debuginfo@1.6.0.0-1.31.b17.el6_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "product": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "product_id": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-devel@1.6.0.0-1.31.b17.el6_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "product": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.31.b17.el6_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "product": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "product_id": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-javadoc@1.6.0.0-1.31.b17.el6_0?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_id": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-src@1.6.0.0-1.31.b17.el6_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_id": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-demo@1.6.0.0-1.31.b17.el6_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_id": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-debuginfo@1.6.0.0-1.31.b17.el6_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.31.b17.el6_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_id": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-devel@1.6.0.0-1.31.b17.el6_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_id": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-javadoc@1.6.0.0-1.31.b17.el6_0?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation" } ] }, "vulnerabilities": [ { "cve": "CVE-2009-3555", "cwe": { "id": "CWE-300", "name": "Channel Accessible by Non-Endpoint" }, "discovery_date": "2009-10-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "533125" } ], "notes": [ { "category": "description", "text": "The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a \"plaintext injection\" attack, aka the \"Project Mogul\" issue.", "title": "Vulnerability description" }, { "category": "summary", "text": "TLS: MITM attacks via session renegotiation", "title": "Vulnerability summary" }, { "category": "other", "text": "Additional information can be found in the Red Hat Knowledgebase article:\nhttps://access.redhat.com/articles/20490", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-3555" }, { "category": "external", "summary": "RHBZ#533125", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=533125" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3555", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3555" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3555", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3555" } ], "release_date": "2009-11-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "TLS: MITM attacks via session renegotiation" }, { "cve": "CVE-2010-3541", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642202" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3541" }, { "category": "external", "summary": "RHBZ#642202", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642202" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3541", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3541" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3541", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3541" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)" }, { "cve": "CVE-2010-3548", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639909" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this allows remote attackers to determine internal IP addresses or \"otherwise-protected internal network names.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK DNS server IP address information leak (6957564)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3548" }, { "category": "external", "summary": "RHBZ#639909", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639909" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3548", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3548" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3548", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3548" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK DNS server IP address information leak (6957564)" }, { "cve": "CVE-2010-3549", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642180" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is an HTTP request splitting vulnerability involving the handling of the chunked transfer encoding method by the HttpURLConnection class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection request splitting (6952017)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3549" }, { "category": "external", "summary": "RHBZ#642180", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642180" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3549", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3549" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3549", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3549" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK HttpURLConnection request splitting (6952017)" }, { "cve": "CVE-2010-3551", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642187" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK local network address disclosure (6952603)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3551" }, { "category": "external", "summary": "RHBZ#642187", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642187" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3551", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3551" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3551", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3551" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK local network address disclosure (6952603)" }, { "cve": "CVE-2010-3553", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642167" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to unsafe reflection involving the UIDefault.ProxyLazyValue class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Swing unsafe reflection usage (6622002)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3553" }, { "category": "external", "summary": "RHBZ#642167", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642167" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3553", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3553" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3553", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3553" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Swing unsafe reflection usage (6622002)" }, { "cve": "CVE-2010-3554", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639880" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to \"permissions granted to certain system objects.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK corba reflection vulnerabilities (6891766,6925672)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3554" }, { "category": "external", "summary": "RHBZ#639880", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639880" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3554", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3554" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3554", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3554" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK corba reflection vulnerabilities (6891766,6925672)" }, { "cve": "CVE-2010-3557", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639904" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to the modification of \"behavior and state of certain JDK classes\" and \"mutable static.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Swing mutable static (6938813)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3557" }, { "category": "external", "summary": "RHBZ#639904", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639904" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3557", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3557" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3557", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3557" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Swing mutable static (6938813)" }, { "cve": "CVE-2010-3561", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639880" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this involves the use of the privileged accept method in the ServerSocket class, which does not limit which hosts can connect and allows remote attackers to bypass intended network access restrictions.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK corba reflection vulnerabilities (6891766,6925672)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3561" }, { "category": "external", "summary": "RHBZ#639880", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639880" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3561", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3561" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3561", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3561" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK corba reflection vulnerabilities (6891766,6925672)" }, { "cve": "CVE-2010-3562", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639897" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is a double free vulnerability in IndexColorModel that allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK IndexColorModel double-free (6925710)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3562" }, { "category": "external", "summary": "RHBZ#639897", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639897" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3562", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3562" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3562", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3562" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK IndexColorModel double-free (6925710)" }, { "cve": "CVE-2010-3564", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639914" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK kerberos vulnerability (6958060)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3564" }, { "category": "external", "summary": "RHBZ#639914", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639914" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3564", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3564" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3564", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3564" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK kerberos vulnerability (6958060)" }, { "cve": "CVE-2010-3565", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639920" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow that triggers memory corruption via large values in a subsample of a JPEG image, related to JPEGImageWriter.writeImage in the imageio API.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK JPEG writeImage remote code execution (6963023)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3565" }, { "category": "external", "summary": "RHBZ#639920", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639920" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3565", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3565" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3565", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3565" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK JPEG writeImage remote code execution (6963023)" }, { "cve": "CVE-2010-3567", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642197" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to a calculation error in right-to-left text character counts for the ICU OpenType font rendering implementation, which triggers an out-of-bounds memory access.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK ICU Opentype layout engine crash (6963285)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3567" }, { "category": "external", "summary": "RHBZ#642197", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642197" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3567", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3567" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3567", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3567" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK ICU Opentype layout engine crash (6963285)" }, { "cve": "CVE-2010-3568", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639876" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is a race condition related to deserialization.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Deserialization Race condition (6559775)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3568" }, { "category": "external", "summary": "RHBZ#639876", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639876" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3568", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3568" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3568", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3568" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Deserialization Race condition (6559775)" }, { "cve": "CVE-2010-3569", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639925" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this allows remote attackers to execute arbitrary code by causing the defaultReadObject method in the Serialization API to set a volatile field multiple times.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Serialization inconsistencies (6966692)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3569" }, { "category": "external", "summary": "RHBZ#639925", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639925" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3569", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3569" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3569", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3569" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Serialization inconsistencies (6966692)" }, { "cve": "CVE-2010-3573", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642202" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3573" }, { "category": "external", "summary": "RHBZ#642202", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642202" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3573", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3573" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3573", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3573" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)" }, { "cve": "CVE-2010-3574", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642215" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection incomplete TRACE permission check (6981426)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3574" }, { "category": "external", "summary": "RHBZ#642215", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642215" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3574", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3574" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3574", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3574" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK HttpURLConnection incomplete TRACE permission check (6981426)" } ] }
RHSA-2010:0865
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated java-1.6.0-openjdk packages that fix several security issues and\ntwo bugs are now available for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "These packages provide the OpenJDK 6 Java Runtime Environment and the\nOpenJDK 6 Software Development Kit.\n\ndefaultReadObject of the Serialization API could be tricked into setting a\nvolatile field multiple times, which could allow a remote attacker to\nexecute arbitrary code with the privileges of the user running the applet\nor application. (CVE-2010-3569)\n\nRace condition in the way objects were deserialized could allow an\nuntrusted applet or application to misuse the privileges of the user\nrunning the applet or application. (CVE-2010-3568)\n\nMiscalculation in the OpenType font rendering implementation caused\nout-of-bounds memory access, which could allow remote attackers to execute\ncode with the privileges of the user running the java process.\n(CVE-2010-3567)\n\nJPEGImageWriter.writeImage in the imageio API improperly checked certain\nimage metadata, which could allow a remote attacker to execute arbitrary\ncode in the context of the user running the applet or application.\n(CVE-2010-3565)\n\nDouble free in IndexColorModel could cause an untrusted applet or\napplication to crash or, possibly, execute arbitrary code with the\nprivileges of the user running the applet or application. (CVE-2010-3562)\n\nThe privileged accept method of the ServerSocket class in the Common Object\nRequest Broker Architecture (CORBA) implementation in OpenJDK allowed it to\nreceive connections from any host, instead of just the host of the current\nconnection. An attacker could use this flaw to bypass restrictions defined\nby network permissions. (CVE-2010-3561)\n\nFlaws in the Swing library could allow an untrusted application to modify\nthe behavior and state of certain JDK classes. (CVE-2010-3557)\n\nFlaws in the CORBA implementation could allow an attacker to execute\narbitrary code by misusing permissions granted to certain system objects.\n(CVE-2010-3554)\n\nUIDefault.ProxyLazyValue had unsafe reflection usage, allowing untrusted\ncallers to create objects via ProxyLazyValue values. (CVE-2010-3553)\n\nHttpURLConnection improperly handled the \"chunked\" transfer encoding\nmethod, which could allow remote attackers to conduct HTTP response\nsplitting attacks. (CVE-2010-3549)\n\nHttpURLConnection improperly checked whether the calling code was granted\nthe \"allowHttpTrace\" permission, allowing untrusted code to create HTTP\nTRACE requests. (CVE-2010-3574)\n\nHttpURLConnection did not validate request headers set by applets, which\ncould allow remote attackers to trigger actions otherwise restricted to\nHTTP clients. (CVE-2010-3541, CVE-2010-3573)\n\nThe Kerberos implementation improperly checked the sanity of AP-REQ\nrequests, which could cause a denial of service condition in the receiving\nJava Virtual Machine. (CVE-2010-3564)\n\nThe java-1.6.0-openjdk packages shipped with the GA release of Red Hat\nEnterprise Linux 6 mitigated a man-in-the-middle attack in the way the\nTLS/SSL protocols handle session renegotiation by disabling renegotiation.\nThis update implements the TLS Renegotiation Indication Extension as\ndefined in RFC 5746, allowing secure renegotiation between updated clients\nand servers. (CVE-2009-3555)\n\nThe NetworkInterface class improperly checked the network \"connect\"\npermissions for local network addresses, which could allow remote attackers\nto read local network addresses. (CVE-2010-3551)\n\nInformation leak flaw in the Java Naming and Directory Interface (JNDI)\ncould allow a remote attacker to access information about\notherwise-protected internal network names. (CVE-2010-3548)\n\nNote: Flaws concerning applets in this advisory (CVE-2010-3568,\nCVE-2010-3554, CVE-2009-3555, CVE-2010-3562, CVE-2010-3557, CVE-2010-3548,\nCVE-2010-3564, CVE-2010-3565, CVE-2010-3569) can only be triggered in\nOpenJDK by calling the \"appletviewer\" application.\n\nBug fixes:\n\n* One defense in depth patch. (BZ#639922)\n\n* Problems for certain SSL connections. In a reported case, this prevented\nthe JBoss JAAS modules from connecting over SSL to Microsoft Active\nDirectory servers. (BZ#642779)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2010:0865", "url": "https://access.redhat.com/errata/RHSA-2010:0865" }, { "category": "external", "summary": "http://www.redhat.com/security/updates/classification/#important", "url": "http://www.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "https://access.redhat.com/kb/docs/DOC-20491", "url": "https://access.redhat.com/kb/docs/DOC-20491" }, { "category": "external", "summary": "639876", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639876" }, { "category": "external", "summary": "639880", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639880" }, { "category": "external", "summary": "639897", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639897" }, { "category": "external", "summary": "639904", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639904" }, { "category": "external", "summary": "639909", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639909" }, { "category": "external", "summary": "639914", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639914" }, { "category": "external", "summary": "639920", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639920" }, { "category": "external", "summary": "639922", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639922" }, { "category": "external", "summary": "639925", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639925" }, { "category": "external", "summary": "642167", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642167" }, { "category": "external", "summary": "642180", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642180" }, { "category": "external", "summary": "642187", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642187" }, { "category": "external", "summary": "642197", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642197" }, { "category": "external", "summary": "642202", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642202" }, { "category": "external", "summary": "642215", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642215" }, { "category": "external", "summary": "533125", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=533125" }, { "category": "external", "summary": "642779", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642779" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0865.json" } ], "title": "Red Hat Security Advisory: java-1.6.0-openjdk security and bug fix update", "tracking": { "current_release_date": "2025-10-09T13:41:37+00:00", "generator": { "date": "2025-10-09T13:41:37+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.9" } }, "id": "RHSA-2010:0865", "initial_release_date": "2010-11-10T19:00:00+00:00", "revision_history": [ { "date": "2010-11-10T19:00:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2010-11-09T14:05:39+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-10-09T13:41:37+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "product": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.31.b17.el6_0?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "product": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "product_id": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-src@1.6.0.0-1.31.b17.el6_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "product": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "product_id": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-demo@1.6.0.0-1.31.b17.el6_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "product": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "product_id": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-debuginfo@1.6.0.0-1.31.b17.el6_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "product": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "product_id": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-devel@1.6.0.0-1.31.b17.el6_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "product": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.31.b17.el6_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "product": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "product_id": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-javadoc@1.6.0.0-1.31.b17.el6_0?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_id": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-src@1.6.0.0-1.31.b17.el6_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_id": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-demo@1.6.0.0-1.31.b17.el6_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_id": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-debuginfo@1.6.0.0-1.31.b17.el6_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_id": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk@1.6.0.0-1.31.b17.el6_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_id": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-devel@1.6.0.0-1.31.b17.el6_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_id": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.6.0-openjdk-javadoc@1.6.0.0-1.31.b17.el6_0?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", "product_id": "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Client" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", "product_id": "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6ComputeNode" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", "product_id": "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Server" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", "product_id": "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation-optional" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "relates_to_product_reference": "6Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" }, "product_reference": "java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "relates_to_product_reference": "6Workstation" } ] }, "vulnerabilities": [ { "cve": "CVE-2009-3555", "cwe": { "id": "CWE-300", "name": "Channel Accessible by Non-Endpoint" }, "discovery_date": "2009-10-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "533125" } ], "notes": [ { "category": "description", "text": "The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a \"plaintext injection\" attack, aka the \"Project Mogul\" issue.", "title": "Vulnerability description" }, { "category": "summary", "text": "TLS: MITM attacks via session renegotiation", "title": "Vulnerability summary" }, { "category": "other", "text": "Additional information can be found in the Red Hat Knowledgebase article:\nhttps://access.redhat.com/articles/20490", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2009-3555" }, { "category": "external", "summary": "RHBZ#533125", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=533125" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3555", "url": "https://www.cve.org/CVERecord?id=CVE-2009-3555" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3555", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3555" } ], "release_date": "2009-11-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "TLS: MITM attacks via session renegotiation" }, { "cve": "CVE-2010-3541", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642202" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3541" }, { "category": "external", "summary": "RHBZ#642202", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642202" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3541", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3541" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3541", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3541" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)" }, { "cve": "CVE-2010-3548", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639909" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this allows remote attackers to determine internal IP addresses or \"otherwise-protected internal network names.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK DNS server IP address information leak (6957564)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3548" }, { "category": "external", "summary": "RHBZ#639909", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639909" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3548", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3548" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3548", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3548" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK DNS server IP address information leak (6957564)" }, { "cve": "CVE-2010-3549", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642180" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is an HTTP request splitting vulnerability involving the handling of the chunked transfer encoding method by the HttpURLConnection class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection request splitting (6952017)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3549" }, { "category": "external", "summary": "RHBZ#642180", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642180" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3549", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3549" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3549", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3549" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK HttpURLConnection request splitting (6952017)" }, { "cve": "CVE-2010-3551", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642187" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK local network address disclosure (6952603)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3551" }, { "category": "external", "summary": "RHBZ#642187", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642187" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3551", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3551" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3551", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3551" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK local network address disclosure (6952603)" }, { "cve": "CVE-2010-3553", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642167" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to unsafe reflection involving the UIDefault.ProxyLazyValue class.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Swing unsafe reflection usage (6622002)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3553" }, { "category": "external", "summary": "RHBZ#642167", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642167" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3553", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3553" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3553", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3553" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Swing unsafe reflection usage (6622002)" }, { "cve": "CVE-2010-3554", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639880" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to \"permissions granted to certain system objects.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK corba reflection vulnerabilities (6891766,6925672)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3554" }, { "category": "external", "summary": "RHBZ#639880", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639880" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3554", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3554" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3554", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3554" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK corba reflection vulnerabilities (6891766,6925672)" }, { "cve": "CVE-2010-3557", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639904" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to the modification of \"behavior and state of certain JDK classes\" and \"mutable static.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Swing mutable static (6938813)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3557" }, { "category": "external", "summary": "RHBZ#639904", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639904" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3557", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3557" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3557", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3557" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Swing mutable static (6938813)" }, { "cve": "CVE-2010-3561", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639880" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this involves the use of the privileged accept method in the ServerSocket class, which does not limit which hosts can connect and allows remote attackers to bypass intended network access restrictions.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK corba reflection vulnerabilities (6891766,6925672)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3561" }, { "category": "external", "summary": "RHBZ#639880", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639880" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3561", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3561" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3561", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3561" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK corba reflection vulnerabilities (6891766,6925672)" }, { "cve": "CVE-2010-3562", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639897" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is a double free vulnerability in IndexColorModel that allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK IndexColorModel double-free (6925710)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3562" }, { "category": "external", "summary": "RHBZ#639897", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639897" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3562", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3562" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3562", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3562" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK IndexColorModel double-free (6925710)" }, { "cve": "CVE-2010-3564", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639914" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK kerberos vulnerability (6958060)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3564" }, { "category": "external", "summary": "RHBZ#639914", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639914" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3564", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3564" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3564", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3564" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK kerberos vulnerability (6958060)" }, { "cve": "CVE-2010-3565", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639920" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow that triggers memory corruption via large values in a subsample of a JPEG image, related to JPEGImageWriter.writeImage in the imageio API.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK JPEG writeImage remote code execution (6963023)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3565" }, { "category": "external", "summary": "RHBZ#639920", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639920" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3565", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3565" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3565", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3565" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK JPEG writeImage remote code execution (6963023)" }, { "cve": "CVE-2010-3567", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642197" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to a calculation error in right-to-left text character counts for the ICU OpenType font rendering implementation, which triggers an out-of-bounds memory access.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK ICU Opentype layout engine crash (6963285)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3567" }, { "category": "external", "summary": "RHBZ#642197", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642197" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3567", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3567" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3567", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3567" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK ICU Opentype layout engine crash (6963285)" }, { "cve": "CVE-2010-3568", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639876" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is a race condition related to deserialization.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Deserialization Race condition (6559775)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3568" }, { "category": "external", "summary": "RHBZ#639876", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639876" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3568", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3568" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3568", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3568" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Deserialization Race condition (6559775)" }, { "cve": "CVE-2010-3569", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "639925" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this allows remote attackers to execute arbitrary code by causing the defaultReadObject method in the Serialization API to set a volatile field multiple times.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK Serialization inconsistencies (6966692)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3569" }, { "category": "external", "summary": "RHBZ#639925", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=639925" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3569", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3569" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3569", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3569" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK Serialization inconsistencies (6966692)" }, { "cve": "CVE-2010-3573", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642202" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3573" }, { "category": "external", "summary": "RHBZ#642202", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642202" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3573", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3573" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3573", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3573" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)" }, { "cve": "CVE-2010-3574", "discovery_date": "2010-09-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "642215" } ], "notes": [ { "category": "description", "text": "Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK HttpURLConnection incomplete TRACE permission check (6981426)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-3574" }, { "category": "external", "summary": "RHBZ#642215", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=642215" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-3574", "url": "https://www.cve.org/CVERecord?id=CVE-2010-3574" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-3574", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3574" } ], "release_date": "2010-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2010-11-10T19:00:00+00:00", "details": "All java-1.6.0-openjdk users are advised to upgrade to these updated\npackages, which resolve these issues. All running instances of OpenJDK\nJava must be restarted for the update to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", "product_ids": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2010:0865" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Client:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Client:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6ComputeNode:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6ComputeNode:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Server:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Server:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation-optional:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation-optional:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.src", "6Workstation:java-1.6.0-openjdk-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-debuginfo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-demo-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-devel-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.31.b17.el6_0.x86_64", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.i686", "6Workstation:java-1.6.0-openjdk-src-1:1.6.0.0-1.31.b17.el6_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK HttpURLConnection incomplete TRACE permission check (6981426)" } ] }
gsd-2010-3564
Vulnerability from gsd
{ "GSD": { "alias": "CVE-2010-3564", "description": "Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue.", "id": "GSD-2010-3564", "references": [ "https://access.redhat.com/errata/RHSA-2010:0865", "https://access.redhat.com/errata/RHSA-2010:0768", "https://linux.oracle.com/cve/CVE-2010-3564.html" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2010-3564" ], "details": "Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue.", "id": "GSD-2010-3564", "modified": "2023-12-13T01:21:35.047482Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "secalert_us@oracle.com", "ID": "CVE-2010-3564", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "http://support.avaya.com/css/P8/documents/100114327", "refsource": "CONFIRM", "url": "http://support.avaya.com/css/P8/documents/100114327" }, { "name": "RHSA-2010:0865", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2010-0865.html" }, { "name": "GLSA-201406-32", "refsource": "GENTOO", "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml" }, { "name": "43963", "refsource": "BID", "url": "http://www.securityfocus.com/bid/43963" }, { "name": "oval:org.mitre.oval:def:12398", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12398" }, { "name": "SSRT100333", "refsource": "HP", "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c02616748" }, { "name": "RHSA-2010:0768", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2010-0768.html" }, { "name": "FEDORA-2010-16240", "refsource": "FEDORA", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html" }, { "name": "USN-1010-1", "refsource": "UBUNTU", "url": "http://www.ubuntu.com/usn/USN-1010-1" }, { "name": "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html" }, { "name": "http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html", "refsource": "CONFIRM", "url": "http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html" }, { "name": "41972", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/41972" }, { "name": "ADV-2010-3086", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2010/3086" }, { "name": "HPSBUX02608", "refsource": "HP", "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c02616748" }, { "name": "http://support.avaya.com/css/P8/documents/100123193", "refsource": "CONFIRM", "url": "http://support.avaya.com/css/P8/documents/100123193" }, { "name": "TA10-287A", "refsource": "CERT", "url": "http://www.us-cert.gov/cas/techalerts/TA10-287A.html" }, { "name": "42377", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/42377" }, { "name": "FEDORA-2010-16312", "refsource": "FEDORA", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html" }, { "name": "FEDORA-2010-16294", "refsource": "FEDORA", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:oracle:sun_products_suite:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "secalert_us@oracle.com", "ID": "CVE-2010-3564" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ] } ] }, "references": { "reference_data": [ { "name": "43963", "refsource": "BID", "tags": [], "url": "http://www.securityfocus.com/bid/43963" }, { "name": "http://support.avaya.com/css/P8/documents/100114327", "refsource": "CONFIRM", "tags": [], "url": "http://support.avaya.com/css/P8/documents/100114327" }, { "name": "41972", "refsource": "SECUNIA", "tags": [ "Vendor Advisory" ], "url": "http://secunia.com/advisories/41972" }, { "name": "USN-1010-1", "refsource": "UBUNTU", "tags": [], "url": "http://www.ubuntu.com/usn/USN-1010-1" }, { "name": "FEDORA-2010-16312", "refsource": "FEDORA", "tags": [], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html" }, { "name": "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "refsource": "CONFIRM", "tags": [], "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html" }, { "name": "FEDORA-2010-16294", "refsource": "FEDORA", "tags": [], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html" }, { "name": "TA10-287A", "refsource": "CERT", "tags": [ "US Government Resource" ], "url": "http://www.us-cert.gov/cas/techalerts/TA10-287A.html" }, { "name": "FEDORA-2010-16240", "refsource": "FEDORA", "tags": [], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html" }, { "name": "RHSA-2010:0768", "refsource": "REDHAT", "tags": [], "url": "http://www.redhat.com/support/errata/RHSA-2010-0768.html" }, { "name": "RHSA-2010:0865", "refsource": "REDHAT", "tags": [], "url": "http://www.redhat.com/support/errata/RHSA-2010-0865.html" }, { "name": "http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html", "refsource": "CONFIRM", "tags": [], "url": "http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html" }, { "name": "42377", "refsource": "SECUNIA", "tags": [ "Vendor Advisory" ], "url": "http://secunia.com/advisories/42377" }, { "name": "ADV-2010-3086", "refsource": "VUPEN", "tags": [ "Vendor Advisory" ], "url": "http://www.vupen.com/english/advisories/2010/3086" }, { "name": "SSRT100333", "refsource": "HP", "tags": [], "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c02616748" }, { "name": "http://support.avaya.com/css/P8/documents/100123193", "refsource": "CONFIRM", "tags": [], "url": "http://support.avaya.com/css/P8/documents/100123193" }, { "name": "GLSA-201406-32", "refsource": "GENTOO", "tags": [], "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml" }, { "name": "oval:org.mitre.oval:def:12398", "refsource": "OVAL", "tags": [], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12398" } ] } }, "impact": { "baseMetricV2": { "cvssV2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 6.4, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false } }, "lastModifiedDate": "2017-09-19T01:31Z", "publishedDate": "2010-10-14T18:00Z" } } }
ghsa-vgp7-8r7h-qwg6
Vulnerability from github
Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue.
{ "affected": [], "aliases": [ "CVE-2010-3564" ], "database_specific": { "cwe_ids": [], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2010-10-14T18:00:00Z", "severity": "MODERATE" }, "details": "Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that the Kerberos implementation does not properly check AP-REQ requests, which allows attackers to cause a denial of service in the JVM. NOTE: CVE has not investigated the apparent discrepancy between the two vendors regarding the consequences of this issue.", "id": "GHSA-vgp7-8r7h-qwg6", "modified": "2022-05-17T01:04:00Z", "published": "2022-05-17T01:04:00Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3564" }, { "type": "WEB", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12398" }, { "type": "WEB", "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c02616748" }, { "type": "WEB", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html" }, { "type": "WEB", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html" }, { "type": "WEB", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html" }, { "type": "WEB", "url": "http://secunia.com/advisories/41972" }, { "type": "WEB", "url": "http://secunia.com/advisories/42377" }, { "type": "WEB", "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml" }, { "type": "WEB", "url": "http://support.avaya.com/css/P8/documents/100114327" }, { "type": "WEB", "url": "http://support.avaya.com/css/P8/documents/100123193" }, { "type": "WEB", "url": "http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html" }, { "type": "WEB", "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html" }, { "type": "WEB", "url": "http://www.redhat.com/support/errata/RHSA-2010-0768.html" }, { "type": "WEB", "url": "http://www.redhat.com/support/errata/RHSA-2010-0865.html" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/43963" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-1010-1" }, { "type": "WEB", "url": "http://www.us-cert.gov/cas/techalerts/TA10-287A.html" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2010/3086" } ], "schema_version": "1.4.0", "severity": [] }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.