java: multiple vulnerabilities [LWN.net]

Package(s):

java-1.6.0-sun

CVE #(s):

CVE-2016-0402 CVE-2016-0448 CVE-2016-0466 CVE-2016-0483 CVE-2016-0494

Created:

January 21, 2016

Updated:

February 2, 2016

Description:

From the Red Hat advisory:

CVE-2016-0494 ICU: integer signedness issue in IndicRearrangementProcessor (OpenJDK 2D, 8140543)
CVE-2016-0402 OpenJDK: URL deserialization inconsistencies (Networking, 8059054)
CVE-2016-0448 OpenJDK: logging of RMI connection secrets (JMX, 8130710)
CVE-2016-0466 OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962)
CVE-2016-0483 OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017)

Alerts:

Gentoo	201610-08	oracle-jdk-bin	2016-10-15
Debian-LTS	DLA-545-1	icu	2016-07-07
Red Hat	RHSA-2016:0098-01	java-1.8.0-ibm	2016-02-02
Red Hat	RHSA-2016:0099-01	java-1.7.1-ibm	2016-02-02
Red Hat	RHSA-2016:0100-01	java-1.7.0-ibm	2016-02-02
Red Hat	RHSA-2016:0101-01	java-1.6.0-ibm	2016-02-02
openSUSE	openSUSE-SU-2016:0279-1	java-1_7_0-openjdk	2016-01-28
SUSE	SUSE-SU-2016:0269-1	java-1_7_0-openjdk	2016-01-27
SUSE	SUSE-SU-2016:0265-1	java-1_7_0-openjdk	2016-01-27
openSUSE	openSUSE-SU-2016:0272-1	Java7	2016-01-28
openSUSE	openSUSE-SU-2016:0270-1	java-1_8_0-openjdk	2016-01-27
openSUSE	openSUSE-SU-2016:0263-1	java-1_8_0-openjdk	2016-01-27
openSUSE	openSUSE-SU-2016:0268-1	java-1_7_0-openjdk	2016-01-27
Debian	DSA-3458-1	openjdk-7	2016-01-27
SUSE	SUSE-SU-2016:0256-1	java-1_8_0-openjdk	2016-01-27
Scientific Linux	SLSA-2016:0067-1	java-1.6.0-openjdk	2016-01-26
Oracle	ELSA-2016-0067	java-1.6.0-openjdk	2016-01-26
Oracle	ELSA-2016-0067	java-1.6.0-openjdk	2016-01-26
Oracle	ELSA-2016-0067	java-1.6.0-openjdk	2016-01-26
CentOS	CESA-2016:0067	java-1.6.0-openjdk	2016-01-26
CentOS	CESA-2016:0067	java-1.6.0-openjdk	2016-01-26
CentOS	CESA-2016:0067	java-1.6.0-openjdk	2016-01-26
Red Hat	RHSA-2016:0067-01	java-1.6.0-openjdk	2016-01-26
Scientific Linux	SLSA-2016:0049-1	java-1.8.0-openjdk	2016-01-21
Scientific Linux	SLSA-2016:0054-1	java-1.7.0-openjdk	2016-01-21
Scientific Linux	SLSA-2016:0053-1	java-1.7.0-openjdk	2016-01-21
Oracle	ELSA-2016-0050	java-1.8.0-openjdk	2016-01-21
Oracle	ELSA-2016-0054	java-1.7.0-openjdk	2016-01-21
Oracle	ELSA-2016-0054	java-1.7.0-openjdk	2016-01-21
Oracle	ELSA-2016-0053	java-1.7.0-openjdk	2016-01-21
CentOS	CESA-2016:0050	java-1.8.0-openjdk	2016-01-21
CentOS	CESA-2016:0049	java-1.8.0-openjdk	2016-01-21
CentOS	CESA-2016:0054	java-1.7.0-openjdk	2016-01-21
CentOS	CESA-2016:0054	java-1.7.0-openjdk	2016-01-21
CentOS	CESA-2016:0053	java-1.7.0-openjdk	2016-01-21
Scientific Linux	SLSA-2016:0050-1	java-1.8.0-openjdk	2016-01-20
Oracle	ELSA-2016-0049	java-1.8.0-openjdk	2016-01-20
Red Hat	RHSA-2016:0055-01	java-1.8.0-oracle	2016-01-21
Red Hat	RHSA-2016:0050-01	java-1.8.0-openjdk	2016-01-20
Red Hat	RHSA-2016:0049-01	java-1.8.0-openjdk	2016-01-20
Red Hat	RHSA-2016:0056-01	java-1.7.0-oracle	2016-01-21
Red Hat	RHSA-2016:0054-01	java-1.7.0-openjdk	2016-01-21
Red Hat	RHSA-2016:0053-01	java-1.7.0-openjdk	2016-01-21
Red Hat	RHSA-2016:0057-01	java-1.6.0-sun	2016-01-21
SUSE	SUSE-SU-2016:0776-1	java-1_6_0-ibm	2016-03-15
SUSE	SUSE-SU-2016:0770-1	java-1_6_0-ibm	2016-03-15
Gentoo	201603-14	icedtea	2016-03-13
SUSE	SUSE-SU-2016:0636-1	java-1_7_0-ibm	2016-03-02
Debian	DSA-3725-1	icu	2016-11-27
SUSE	SUSE-SU-2016:0431-1	java-1_6_0-ibm	2016-02-11
SUSE	SUSE-SU-2016:0433-1	java-1_7_0-ibm	2016-02-11
SUSE	SUSE-SU-2016:0428-1	java-1_6_0-ibm	2016-02-11
SUSE	SUSE-SU-2016:0399-1	java-1_7_1-ibm	2016-02-10
SUSE	SUSE-SU-2016:0401-1	java-1_7_1-ibm	2016-02-10
SUSE	SUSE-SU-2016:0390-1	java-1_8_0-ibm	2016-02-09
Mageia	MGASA-2016-0048	java-1.8.0-openjdk/copy-jdk-configs/lua-lunit/lua-posix	2016-02-05
Debian-LTS	DLA-410-1	openjdk-6	2016-02-04
Debian	DSA-3465-1	openjdk-6	2016-02-02
Ubuntu	USN-2884-1	openjdk-7	2016-02-01
Ubuntu	USN-2885-1	openjdk-6	2016-02-01