Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Ubuntu 12.04 LTS USN-2972-1 Critical: OpenJDK 6 Denial of Service

ubuntu
Calendar Grey May 10, 2016
Scroller Ubuntu
OpenJDK 7 flaws addressed in Ubuntu 14.04 LTS with urgent guidance for impacted users.
Several security issues were fixed in OpenJDK 6.

Summary

Several security issues were fixed in OpenJDK 6.

Software Description:

- openjdk-6: Open Source Java implementation

Details:

Multiple vulnerabilities were discovered in the OpenJDK JRE related to

information disclosure, data integrity, and availability. An attacker

could exploit these to cause a denial of service, expose sensitive data

over the network, or possibly execute arbitrary code. (CVE-2016-0686,

CVE-2016-0687, CVE-2016-3427)

A vulnerability was discovered in the OpenJDK JRE related to information

disclosure. An attacker could exploit this to expose sensitive data over

the network. (CVE-2016-0695)

A vulnerability was discovered in the OpenJDK JRE related to availability.

An attacker could exploit this to cause a denial of service.

(CVE-2016-3425)

Topics%20covered

Topics Covered

security advisory denial of service critical Ubuntu information disclosure data integrity openjdk-6

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  icedtea-6-jre-cacao             6b39-1.13.11-0ubuntu0.12.04.1
  icedtea-6-jre-jamvm             6b39-1.13.11-0ubuntu0.12.04.1
  openjdk-6-jdk                   6b39-1.13.11-0ubuntu0.12.04.1
  openjdk-6-jre                   6b39-1.13.11-0ubuntu0.12.04.1
  openjdk-6-jre-headless          6b39-1.13.11-0ubuntu0.12.04.1
  openjdk-6-jre-lib               6b39-1.13.11-0ubuntu0.12.04.1
  openjdk-6-jre-zero              6b39-1.13.11-0ubuntu0.12.04.1
  openjdk-6-source                6b39-1.13.11-0ubuntu0.12.04.1

This update uses a new upstream release, which includes additional
bug fixes. After a standard system update you need to restart any
Java applications or applets to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2972-1

CVE-2016-0686, CVE-2016-0687, CVE-2016-0695, CVE-2016-3425,

CVE-2016-3427

Severity
critical
Lowest
Low
Medium
High
Critical

May 10, 2016

Topics%20covered

Topics Covered

security advisory denial of service critical Ubuntu information disclosure data integrity openjdk-6

Package Information

https://launchpad.net/ubuntu/+source/openjdk-6/6b39-1.13.11-0ubuntu0.12.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.