Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Ubuntu: 1908-1 Moderate: Information Disclosure DoS in OpenJDK 6

ubuntu
Calendar Grey July 23, 2013
Scroller Ubuntu
Multiple security flaws identified in OpenJDK 6 demand prompt remediation. Guidance for updating is available.
Several security issues were fixed in OpenJDK 6.

Summary

Several security issues were fixed in OpenJDK 6.

Software Description:

- openjdk-6: Open Source Java implementation

Details:

Several vulnerabilities were discovered in the OpenJDK JRE related to

information disclosure and data integrity. An attacker could exploit these

to expose sensitive data over the network. (CVE-2013-1500, CVE-2013-2454,

CVE-2013-2458)

A vulnerability was discovered in the OpenJDK Javadoc related to data

integrity. (CVE-2013-1571)

A vulnerability was discovered in the OpenJDK JRE related to information

disclosure and availability. An attacker could exploit this to cause a

denial of service or expose sensitive data over the network.

(CVE-2013-2407)

Several vulnerabilities were discovered in the OpenJDK JRE related to

information disclosure. An attacker could exploit these to expose sensitive

data over the network. (CVE-2013-2412, CVE-2013-2443, CVE-2013-2446,

CVE-2013-2447, CVE-2013-2449, CVE-2013-2452, CVE-2013-2456)

Several vul...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory DoS update instructions information disclosure ubuntu security issues openjdk

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  icedtea-6-jre-cacao             6b27-1.12.6-1ubuntu0.12.04.2
  icedtea-6-jre-jamvm             6b27-1.12.6-1ubuntu0.12.04.2
  openjdk-6-doc                   6b27-1.12.6-1ubuntu0.12.04.2
  openjdk-6-jre                   6b27-1.12.6-1ubuntu0.12.04.2
  openjdk-6-jre-headless          6b27-1.12.6-1ubuntu0.12.04.2
  openjdk-6-jre-lib               6b27-1.12.6-1ubuntu0.12.04.2
  openjdk-6-jre-zero              6b27-1.12.6-1ubuntu0.12.04.2

Ubuntu 10.04 LTS:
  icedtea-6-jre-cacao             6b27-1.12.6-1ubuntu0.10.04.2
  openjdk-6-doc                   6b27-1.12.6-1ubuntu0.10.04.2
  openjdk-6-jre                   6b27-1.12.6-1ubuntu0.10.04.2
  openjdk-6-jre-headless          6b27-1.12.6-1ubuntu0.10.04.2
  openjdk-6-jre-lib               6b27-1.12.6-1ubuntu0.10.04.2
  openjdk-6-jre-zero              6b27-1.12.6-1ubuntu0.10.04.2

This update uses a new upstream release, which includes additional bug
fixes. After a standard system update you need to restart any Java
applications or applets to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1908-1

CVE-2013-1500, CVE-2013-1571, CVE-2013-2407, CVE-2013-2412,

CVE-2013-2443, CVE-2013-2444, CVE-2013-2445, CVE-2013-2446,

CVE-2013-2447, CVE-2013-2448, CVE-2013-2449, CVE-2013-2450,

CVE-2013-2451, CVE-2013-2452, CVE-2013-2453, CVE-2013-2454,

CVE-2013-2455, CVE-2013-2456, CVE-2013-2457, CVE-2013-2458,

CVE-2013-2459, CVE-2013-2461, CVE-2013-2463, CVE-2013-2465,

CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472,

CVE-2013-2473, CVE-2013-3743

Severity
important
Lowest
Low
Medium
High
Critical

=========================================================================Ubuntu Security Notice USN-1908-1

Topics%20covered

Topics Covered

security advisory DoS update instructions information disclosure ubuntu security issues openjdk

Package Information

https://launchpad.net/ubuntu/+source/openjdk-6/6b27-1.12.6-1ubuntu0.12.04.2
https://launchpad.net/ubuntu/+source/openjdk-6/6b27-1.12.6-1ubuntu0.10.04.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.