Site icon 지락문화예술공작단

USN-2972-1: OpenJDK 6 vulnerabilities

USN-2972-1: OpenJDK 6 vulnerabilities

Ubuntu Security Notice USN-2972-1

10th May, 2016

openjdk-6 vulnerabilities

A security issue affects these releases of Ubuntu and its
derivatives:

Summary

Several security issues were fixed in OpenJDK 6.

Software description

Details

Multiple vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure, data integrity, and availability. An attacker
could exploit these to cause a denial of service, expose sensitive data
over the network, or possibly execute arbitrary code. (CVE-2016-0686,
CVE-2016-0687, CVE-2016-3427)

A vulnerability was discovered in the OpenJDK JRE related to information
disclosure. An attacker could exploit this to expose sensitive data over
the network. (CVE-2016-0695)

A vulnerability was discovered in the OpenJDK JRE related to availability.
An attacker could exploit this to cause a denial of service.
(CVE-2016-3425)

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 12.04 LTS:
icedtea-6-jre-cacao

6b39-1.13.11-0ubuntu0.12.04.1
icedtea-6-jre-jamvm

6b39-1.13.11-0ubuntu0.12.04.1
openjdk-6-jdk

6b39-1.13.11-0ubuntu0.12.04.1
openjdk-6-source

6b39-1.13.11-0ubuntu0.12.04.1
openjdk-6-jre

6b39-1.13.11-0ubuntu0.12.04.1
openjdk-6-jre-headless

6b39-1.13.11-0ubuntu0.12.04.1
openjdk-6-jre-zero

6b39-1.13.11-0ubuntu0.12.04.1
openjdk-6-jre-lib

6b39-1.13.11-0ubuntu0.12.04.1

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

This update uses a new upstream release, which includes additional
bug fixes. After a standard system update you need to restart any
Java applications or applets to make all the necessary changes.

References

CVE-2016-0686,

CVE-2016-0687,

CVE-2016-0695,

CVE-2016-3425,

CVE-2016-3427

Source: USN-2972-1: OpenJDK 6 vulnerabilities

Exit mobile version