Lucene search

K
oraclelinuxOracleELSA-2011-1380
HistoryOct 18, 2011 - 12:00 a.m.

java-1.6.0-openjdk security update

2011-10-1800:00:00
Oracle
linux.oracle.com
27

0.972 High

EPSS

Percentile

99.8%

[1:1.6.0.0-1.40.1.9.10]

  • Resolves: rhbz#744788
  • Bumped to IcedTea6 1.9.8
    -removed font copying
    Security fixes
    • S7000600, CVE-2011-3547: InputStream skip() information leak
    • S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor
    • S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow
    • S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager
    • S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine
    • S7055902, CVE-2011-3521: IIOP deserialization code execution
    • S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks
    • S7064341, CVE-2011-3389: JSSE
    • S7070134, CVE-2011-3558: Hotspot unspecified issue
    • S7077466, CVE-2011-3556: RMI DGC server remote code execution
    • S7083012, CVE-2011-3557: RMI registry privileged code execution
    • S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection
      NetX
    • PR794: javaws does not work if a Web Start app jar has a Class-Path element in the manifest