The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment and the Sun Java 6 Software Development Kit.

This update fixes several vulnerabilities in the Sun Java 6 Runtime Environment and the Sun Java 6 Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch page, listed in the References section. (CVE-2012-0551, CVE-2012-1711, CVE-2012-1713, CVE-2012-1716, CVE-2012-1717, CVE-2012-1718, CVE-2012-1719, CVE-2012-1721, CVE-2012-1722, CVE-2012-1723, CVE-2012-1724, CVE-2012-1725)

All users of java-1.6.0-sun are advised to upgrade to these updated packages, which provide JDK and JRE 6 Update 33 and resolve these issues. All running instances of Sun Java must be restarted for the update to take effect.

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Network Satellite Server 5.5.

The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

This update corrects several security vulnerabilities in the IBM Java Runtime Environment shipped as part of Red Hat Network Satellite Server 5.5. In a typical operating environment, these are of low security risk as the runtime is not used on untrusted applets.

Several flaws were fixed in the IBM Java 2 Runtime Environment.
(CVE-2012-0547, CVE-2012-0551, CVE-2012-1531, CVE-2012-1532, CVE-2012-1533, CVE-2012-1541, CVE-2012-1682, CVE-2012-1713, CVE-2012-1716, CVE-2012-1717, CVE-2012-1718, CVE-2012-1719, CVE-2012-1721, CVE-2012-1722, CVE-2012-1725, CVE-2012-3143, CVE-2012-3159, CVE-2012-3213, CVE-2012-3216, CVE-2012-3342, CVE-2012-4820, CVE-2012-4822, CVE-2012-4823, CVE-2012-5068, CVE-2012-5069, CVE-2012-5071, CVE-2012-5072, CVE-2012-5073, CVE-2012-5075, CVE-2012-5079, CVE-2012-5081, CVE-2012-5083, CVE-2012-5084, CVE-2012-5089, CVE-2013-0169, CVE-2013-0351, CVE-2013-0401, CVE-2013-0409, CVE-2013-0419, CVE-2013-0423, CVE-2013-0424, CVE-2013-0425, CVE-2013-0426, CVE-2013-0427, CVE-2013-0428, CVE-2013-0432, CVE-2013-0433, CVE-2013-0434, CVE-2013-0435, CVE-2013-0438, CVE-2013-0440, CVE-2013-0441, CVE-2013-0442, CVE-2013-0443, CVE-2013-0445, CVE-2013-0446, CVE-2013-0450, CVE-2013-0809, CVE-2013-1473, CVE-2013-1476, CVE-2013-1478, CVE-2013-1480, CVE-2013-1481, CVE-2013-1486, CVE-2013-1487, CVE-2013-1491, CVE-2013-1493, CVE-2013-1500, CVE-2013-1537, CVE-2013-1540, CVE-2013-1557, CVE-2013-1563, CVE-2013-1569, CVE-2013-1571, CVE-2013-2383, CVE-2013-2384, CVE-2013-2394, CVE-2013-2407, CVE-2013-2412, CVE-2013-2417, CVE-2013-2418, CVE-2013-2419, CVE-2013-2420, CVE-2013-2422, CVE-2013-2424, CVE-2013-2429, CVE-2013-2430, CVE-2013-2432, CVE-2013-2433, CVE-2013-2435, CVE-2013-2437, CVE-2013-2440, CVE-2013-2442, CVE-2013-2443, CVE-2013-2444, CVE-2013-2446, CVE-2013-2447, CVE-2013-2448, CVE-2013-2450, CVE-2013-2451, CVE-2013-2452, CVE-2013-2453, CVE-2013-2454, CVE-2013-2455, CVE-2013-2456, CVE-2013-2457, CVE-2013-2459, CVE-2013-2463, CVE-2013-2464, CVE-2013-2465, CVE-2013-2466, CVE-2013-2468, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, CVE-2013-2473, CVE-2013-3743)

Users of Red Hat Network Satellite Server 5.5 are advised to upgrade to these updated packages, which contain the IBM Java SE 6 SR14 release. For this update to take effect, Red Hat Network Satellite Server must be restarted ('/usr/sbin/rhn-satellite restart'), as well as all running instances of IBM Java.

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1238 advisory.

  - Oracle JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment) (CVE-2012-0551, CVE-2012-1721,     CVE-2012-1722)

  - OpenJDK: fontmanager layout lookup code memory corruption (2D, 7143617) (CVE-2012-1713)

  - OpenJDK: SynthLookAndFeel application context bypass (Swing, 7143614) (CVE-2012-1716)

  - OpenJDK: insecure temporary file permissions (JRE, 7143606) (CVE-2012-1717)

  - OpenJDK: CRL and certificate extensions handling improvements (Security, 7143872) (CVE-2012-1718)

  - OpenJDK: mutable repository identifiers in generated stub code (CORBA, 7143851) (CVE-2012-1719)

  - OpenJDK: insufficient invokespecial <init> verification (HotSpot, 7160757) (CVE-2012-1725)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Mac OS X 10.7 host is running a version of Java for Mac OS X that is missing update 2012-004, which updates the Java version to 1.6.0_33.  As such, it is affected by several security vulnerabilities, the most serious of which may allow an untrusted Java applet to execute arbitrary code with the privileges of the current user outside the Java sandbox.

In addition, the Java browser plugin and Java Web Start are deactivated if they remain unused for 35 days or do not meet the criteria for minimum safe version.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1289 advisory.

  - OpenJDK: AWT hardening fixes (AWT, 7163201) (CVE-2012-0547)

  - Oracle JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment) (CVE-2012-0551, CVE-2012-1721,     CVE-2012-1722)

  - OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476) (CVE-2012-1682)

  - OpenJDK: fontmanager layout lookup code memory corruption (2D, 7143617) (CVE-2012-1713)

  - OpenJDK: SynthLookAndFeel application context bypass (Swing, 7143614) (CVE-2012-1716)

  - OpenJDK: insecure temporary file permissions (JRE, 7143606) (CVE-2012-1717)

  - OpenJDK: mutable repository identifiers in generated stub code (CORBA, 7143851) (CVE-2012-1719)

  - OpenJDK: insufficient invokespecial <init> verification (HotSpot, 7160757) (CVE-2012-1725)

  - OpenJDK: java.lang.invoke.MethodHandles.Lookup does not honor access modes (Libraries, 7165628)     (CVE-2012-1726)

  - OpenJDK: beans MethodElementHandler insufficient permission checks (beans, 7194567) (CVE-2012-3136)

  - OpenJDK: beans insufficient permission checks, Java 7 0day (beans, 7162473) (CVE-2012-4681)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

IBM Java 1.7.0 was updated to SR2 which fixes critical security issues.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0734 advisory.

    The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment and     the Sun Java 6 Software Development Kit.

    This update fixes several vulnerabilities in the Sun Java 6 Runtime     Environment and the Sun Java 6 Software Development Kit. Further     information about these flaws can be found on the Oracle Java SE Critical     Patch page, listed in the References section. (CVE-2012-0551,     CVE-2012-1711, CVE-2012-1713, CVE-2012-1716, CVE-2012-1717, CVE-2012-1718,     CVE-2012-1719, CVE-2012-1721, CVE-2012-1722, CVE-2012-1723, CVE-2012-1724,     CVE-2012-1725)

    All users of java-1.6.0-sun are advised to upgrade to these updated     packages, which provide JDK and JRE 6 Update 33 and resolve these issues.
    All running instances of Sun Java must be restarted for the update to take     effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is earlier than 7 Update 5 / 6 Update 33 / 5.0 Update 36 / 1.4.2_38 and is, therefore, potentially affected by security issues in the following components :

  - 2D
  - Deployment
  - Hotspot
  - Swing
  - CORBA
  - Libraries
  - JAXP
  - Security
  - Networking
  - Java Runtime Environment

IBM Java 1.5.0 was updated to SR11 which fixes bugs and security issues.

http://www.ibm.com/developerworks/java/jdk/alerts/

Also three bugs have been fixed :

  - fix bnc#771808: create symlink /usr/bin/javaws properly

  - fix bnc#666744: mark all configuration files as     %config(noreplace)

  - fix bnc#773021: add code removing fonts symlink to     baselibs.conf

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
61330	Scientific Linux Security Update : java-1.6.0-sun on SL5.x i386/x86_64 (20120613)	Nessus	Scientific Linux Local Security Checks	2012/8/1	2022/3/8	critical
78976	RHEL 5 / 6 : IBM Java Runtime in Satellite Server (RHSA-2013:1456) (ROBOT)	Nessus	Red Hat Local Security Checks	2014/11/8	2022/12/5	critical
62001	RHEL 5 / 6 : java-1.6.0-ibm (RHSA-2012:1238)	Nessus	Red Hat Local Security Checks	2012/9/7	2024/4/21	critical
59464	Mac OS X : Java for OS X 2012-004	Nessus	MacOS X Local Security Checks	2012/6/13	2023/11/27	critical
62196	RHEL 6 : java-1.7.0-ibm (RHSA-2012:1289)	Nessus	Red Hat Local Security Checks	2012/9/19	2024/4/21	critical
64170	SuSE 11.2 Security Update : IBM Java (SAT Patch Number 6839)	Nessus	SuSE Local Security Checks	2013/1/25	2022/3/8	critical
59492	RHEL 6 : java-1.6.0-sun (RHSA-2012:0734)	Nessus	Red Hat Local Security Checks	2012/6/14	2025/4/15	critical
64848	Oracle Java SE Multiple Vulnerabilities (June 2012 CPU) (Unix)	Nessus	Misc.	2013/2/22	2022/4/11	critical
62381	SuSE 10 Security Update : IBM Java (ZYPP Patch Number 8284)	Nessus	SuSE Local Security Checks	2012/9/29	2021/1/19	critical
59462	Oracle Java SE Multiple Vulnerabilities (June 2012 CPU)	Nessus	Windows	2012/6/13	2022/4/11	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical