exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Ubuntu Security Notice USN-3077-1

Ubuntu Security Notice USN-3077-1
Posted Sep 13, 2016
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 3077-1 - A vulnerability was discovered in the OpenJDK JRE related to data integrity. An attacker could exploit this to expose sensitive data over the network or possibly execute arbitrary code. Multiple vulnerabilities were discovered in the OpenJDK JRE related to availability. An attacker could exploit these to cause a denial of service. A vulnerability was discovered in the OpenJDK JRE related to information disclosure. An attacker could exploit this to expose sensitive data over the network. Various other issues were also addressed.

tags | advisory, denial of service, arbitrary, vulnerability, info disclosure
systems | linux, ubuntu
advisories | CVE-2016-3458, CVE-2016-3500, CVE-2016-3508, CVE-2016-3550, CVE-2016-3606
SHA-256 | 48f0ce658c7c8fdce57f43905c3dfde4c291c365191c6170fbd1123432616b35

Ubuntu Security Notice USN-3077-1

Change Mirror Download

==========================================================================
Ubuntu Security Notice USN-3077-1
September 12, 2016

openjdk-6 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.04 LTS

Summary:

Several security issues were fixed in OpenJDK 6.

Software Description:
- openjdk-6: Open Source Java implementation

Details:

A vulnerability was discovered in the OpenJDK JRE related to data
integrity. An attacker could exploit this to expose sensitive data over the
network or possibly execute arbitrary code. (CVE-2016-3458)

Multiple vulnerabilities were discovered in the OpenJDK JRE related
to availability. An attacker could exploit these to cause a denial
of service. (CVE-2016-3500, CVE-2016-3508)

A vulnerability was discovered in the OpenJDK JRE related to information
disclosure. An attacker could exploit this to expose sensitive data over
the network. (CVE-2016-3550)

A vulnerability was discovered in the OpenJDK JRE related to information
disclosure, data integrity, and availability. An attacker could exploit
this to cause a denial of service, expose sensitive data over the network,
or possibly execute arbitrary code. (CVE-2016-3606)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
icedtea-6-jre-cacao 6b40-1.13.12-0ubuntu0.12.04.1
icedtea-6-jre-jamvm 6b40-1.13.12-0ubuntu0.12.04.1
openjdk-6-jre 6b40-1.13.12-0ubuntu0.12.04.1
openjdk-6-jre-headless 6b40-1.13.12-0ubuntu0.12.04.1
openjdk-6-jre-lib 6b40-1.13.12-0ubuntu0.12.04.1
openjdk-6-jre-zero 6b40-1.13.12-0ubuntu0.12.04.1

After a standard system update you need to restart any Java
applications or applets to make all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-3077-1
CVE-2016-3458, CVE-2016-3500, CVE-2016-3508, CVE-2016-3550,
CVE-2016-3606

Package Information:
https://launchpad.net/ubuntu/+source/openjdk-6/6b40-1.13.12-0ubuntu0.12.04.1


--opJtzjQTFsWo+cga

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=5U3P
-----END PGP SIGNATURE-----

--opJtzjQTFsWo+cga--


Login or Register to add favorites

File Archive:

June 2022

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jun 1st
    19 Files
  • 2
    Jun 2nd
    16 Files
  • 3
    Jun 3rd
    28 Files
  • 4
    Jun 4th
    0 Files
  • 5
    Jun 5th
    0 Files
  • 6
    Jun 6th
    19 Files
  • 7
    Jun 7th
    23 Files
  • 8
    Jun 8th
    11 Files
  • 9
    Jun 9th
    10 Files
  • 10
    Jun 10th
    4 Files
  • 11
    Jun 11th
    0 Files
  • 12
    Jun 12th
    0 Files
  • 13
    Jun 13th
    0 Files
  • 14
    Jun 14th
    0 Files
  • 15
    Jun 15th
    0 Files
  • 16
    Jun 16th
    0 Files
  • 17
    Jun 17th
    0 Files
  • 18
    Jun 18th
    0 Files
  • 19
    Jun 19th
    27 Files
  • 20
    Jun 20th
    65 Files
  • 21
    Jun 21st
    10 Files
  • 22
    Jun 22nd
    8 Files
  • 23
    Jun 23rd
    6 Files
  • 24
    Jun 24th
    6 Files
  • 25
    Jun 25th
    0 Files
  • 26
    Jun 26th
    0 Files
  • 27
    Jun 27th
    0 Files
  • 28
    Jun 28th
    0 Files
  • 29
    Jun 29th
    0 Files
  • 30
    Jun 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Hosting By
Rokasec
close