Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Ubuntu 12.04 LTS USN-2827-1 Moderate: OpenJDK 6 Security Issues

ubuntu
Calendar Grey December 3, 2015
Scroller Ubuntu
Multiple significant security weaknesses in OpenJDK 6 were addressed in Ubuntu 12.04 LTS, improving data protection and overall system security.
Several security issues were fixed in OpenJDK 6.

Summary

Several security issues were fixed in OpenJDK 6.

Software Description:

- openjdk-6: Open Source Java implementation

Details:

Multiple vulnerabilities were discovered in the OpenJDK JRE related to

information disclosure, data integrity and availability. An attacker

could exploit these to cause a denial of service or expose sensitive

data over the network. (CVE-2015-4805, CVE-2015-4835, CVE-2015-4843,

CVE-2015-4844, CVE-2015-4860, CVE-2015-4881, CVE-2015-4883)

A vulnerability was discovered in the OpenJDK JRE related to

information disclosure and data integrity. An attacker could exploit

this to expose sensitive data over the network. (CVE-2015-4806)

A vulnerability was discovered in the OpenJDK JRE related to data

integrity. An attacker could exploit this expose sensitive data over

the network. (CVE-2015-4872)

Multiple vulnerabilities were discovered in the OpenJDK JRE related

to information disclosure. An attacker could exploit these to expose

sensitive data over the network....

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu information disclosure data integrity OpenJDK

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  icedtea-6-jre-cacao             6b37-1.13.9-1ubuntu0.12.04.1
  icedtea-6-jre-jamvm             6b37-1.13.9-1ubuntu0.12.04.1
  openjdk-6-jre                   6b37-1.13.9-1ubuntu0.12.04.1
  openjdk-6-jre-headless          6b37-1.13.9-1ubuntu0.12.04.1
  openjdk-6-jre-lib               6b37-1.13.9-1ubuntu0.12.04.1
  openjdk-6-jre-zero              6b37-1.13.9-1ubuntu0.12.04.1

This update uses a new upstream release, which includes additional
bug fixes. After a standard system update you need to restart any
Java applications or applets to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2827-1

CVE-2015-4734, CVE-2015-4803, CVE-2015-4805, CVE-2015-4806,

CVE-2015-4835, CVE-2015-4842, CVE-2015-4843, CVE-2015-4844,

CVE-2015-4860, CVE-2015-4872, CVE-2015-4881, CVE-2015-4882,

CVE-2015-4883, CVE-2015-4893, CVE-2015-4903, CVE-2015-4911

Severity
important
Lowest
Low
Medium
High
Critical

December 03, 2015

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu information disclosure data integrity OpenJDK

Package Information

https://launchpad.net/ubuntu/+source/openjdk-6/6b37-1.13.9-1ubuntu0.12.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.