- Vulnerability/
- RHSA-2010:0337
RHSA-2010:0337: Critical: java-1.6.0-sun security update
First published: Wed Mar 31 2010(Updated: )
The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment and<br>the Sun Java 6 Software Development Kit.<br>This update fixes several vulnerabilities in the Sun Java 6 Runtime<br>Environment and the Sun Java 6 Software Development Kit. Further<br>information about these flaws can be found on the "Oracle Java SE and Java<br>for Business Critical Patch Update Advisory" page, listed in the<br>References section. (CVE-2009-3555, CVE-2010-0082, CVE-2010-0084,<br>CVE-2010-0085, CVE-2010-0087, CVE-2010-0088, CVE-2010-0089, CVE-2010-0090,<br>CVE-2010-0091, CVE-2010-0092, CVE-2010-0093, CVE-2010-0094, CVE-2010-0095,<br>CVE-2010-0837, CVE-2010-0838, CVE-2010-0839, CVE-2010-0840, CVE-2010-0841,<br>CVE-2010-0842, CVE-2010-0843, CVE-2010-0844, CVE-2010-0845, CVE-2010-0846,<br>CVE-2010-0847, CVE-2010-0848, CVE-2010-0849)<br>For the CVE-2009-3555 issue, this update disables renegotiation in the Java<br>Secure Socket Extension (JSSE) component. Unsafe renegotiation can be<br>re-enabled using the sun.security.ssl.allowUnsafeRenegotiation property.<br>Refer to the following Knowledgebase article for details:<br><a href="http://kbase.redhat.com/faq/docs/DOC-20491" target="_blank">http://kbase.redhat.com/faq/docs/DOC-20491</a> Users of java-1.6.0-sun should upgrade to these updated packages, which<br>correct these issues. All running instances of Sun Java must be restarted<br>for the update to take effect.<br>
| Affected Software | Affected Version | How to fix |
|---|
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=533125
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=575736
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=575740
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=575747
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=575755
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=575756
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=575760
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=575764
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=575769
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=575772
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=575775
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=575808
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=575818
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=575846
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=575854
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=575865
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=575871
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=578430
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=578432
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=578433
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=578436
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=578437
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=578440
- http://www.redhat.com/security/updates/classification/#critical
- http://kbase.redhat.com/faq/docs/DOC-20491
- http://www.oracle.com/technology/deploy/security/critical-patch-updates/javacpumar2010.html
- https://access.redhat.com/errata/RHSA-2010:0337 (Advisory)
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2010:0337
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type