RHSA-2015:1928High

Red Hat Security Advisory: java-1.6.0-sun security update

Published
October 22, 2015
Last Modified
November 5, 2026

🔗 CVE IDs covered (17)

CVE-2015-4806 →CVE-2015-4844 →CVE-2015-4881 →CVE-2015-4882 →CVE-2015-4893 →CVE-2015-4843 →CVE-2015-4860 →CVE-2015-4872 →CVE-2015-4734 →CVE-2015-4803 →CVE-2015-4835 →CVE-2015-4903 →CVE-2015-4911 →CVE-2015-4805 →CVE-2015-4842 →CVE-2015-4883 →CVE-2015-4902 →

📋 Description

CVE-2015-4734 — OpenJDK: kerberos realm name leak (JGSS, 8048030) CVE-2015-4803 — OpenJDK: inefficient use of hash tables and lists during XML parsing (JAXP, 8068842) CVE-2015-4805 — OpenJDK: missing checks for proper initialization in ObjectStreamClass (Serialization, 8103671) CVE-2015-4806 — OpenJDK: HttpURLConnection header restriction bypass (Libraries, 8130193) CVE-2015-4835 — OpenJDK: insufficient permission checks in StubGenerator (CORBA, 8076383) CVE-2015-4842 — OpenJDK: leak of user.dir location (JAXP, 8078427) CVE-2015-4843 — OpenJDK: java.nio Buffers integer overflow issues (Libraries, 8130891) CVE-2015-4844 — ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042) CVE-2015-4860 — OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688) CVE-2015-4872 — OpenJDK: incomplete constraints enforcement by AlgorithmChecker (Security, 8131291) CVE-2015-4881 — OpenJDK: missing type checks in IIOPInputStream (CORBA, 8076392) CVE-2015-4882 — OpenJDK: incorrect String object deserialization in IIOPInputStream (CORBA, 8076387) CVE-2015-4883 — OpenJDK: incorrect access control context used in DGCClient (RMI, 8076413) CVE-2015-4893 — OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733) CVE-2015-4902 — JDK: unspecified vulnerability fixed in 6u105, 7u91 and 8u65 (Deployment) CVE-2015-4903 — OpenJDK: insufficient proxy class checks in RemoteObjectInvocationHandler (RMI, 8076339) CVE-2015-4911 — OpenJDK: incomplete supportDTD enforcement (JAXP, 8130078)

🎯 Affected products110

  • Oracle Java for Red Hat Enterprise Linux Client (v. 7)
  • Oracle Java for Red Hat Enterprise Linux Client 5
  • Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)
  • Oracle Java for Red Hat Enterprise Linux Desktop 6
  • Oracle Java for Red Hat Enterprise Linux HPC Node 6
  • Oracle Java for Red Hat Enterprise Linux Server (v. 7)
  • Oracle Java for Red Hat Enterprise Linux Server 5
  • Oracle Java for Red Hat Enterprise Linux Server 6
  • Oracle Java for Red Hat Enterprise Linux Workstation
  • Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)
  • java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11.i586 as a component of Oracle Java for Red Hat Enterprise Linux Client 5
  • java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11.i586 as a component of Oracle Java for Red Hat Enterprise Linux Server 5
  • java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client 5
  • java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 5
  • java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6
  • java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6
  • java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6
  • java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation
  • java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6
  • java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6
  • java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6
  • java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation
  • java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1.i686 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)
  • java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1.i686 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)
  • java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)
  • java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)
  • java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)
  • java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)
  • java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)
  • java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)
  • +80 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (21)