Red Hat Errata System 5.3 2012-06-13T16:02:07 Supplementary for Red Hat Enterprise Linux 6 The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment and the Sun Java 6 Software Development Kit. This update fixes several vulnerabilities in the Sun Java 6 Runtime Environment and the Sun Java 6 Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch page, listed in the References section. (CVE-2012-0551, CVE-2012-1711, CVE-2012-1713, CVE-2012-1716, CVE-2012-1717, CVE-2012-1718, CVE-2012-1719, CVE-2012-1721, CVE-2012-1722, CVE-2012-1723, CVE-2012-1724, CVE-2012-1725) All users of java-1.6.0-sun are advised to upgrade to these updated packages, which provide JDK and JRE 6 Update 33 and resolve these issues. All running instances of Sun Java must be restarted for the update to take effect. Critical Copyright 2012 Red Hat, Inc. CVE-2012-0551 CVE-2012-1711 CVE-2012-1713 CVE-2012-1716 CVE-2012-1717 CVE-2012-1718 CVE-2012-1719 CVE-2012-1721 CVE-2012-1722 CVE-2012-1723 CVE-2012-1724 CVE-2012-1725 CVE-2012-1711 OpenJDK: improper protection of CORBA data models (CORBA, 7079902) CVE-2012-1717 OpenJDK: insecure temporary file permissions (JRE, 7143606) CVE-2012-1716 OpenJDK: SynthLookAndFeel application context bypass (Swing, 7143614) CVE-2012-1713 OpenJDK: fontmanager layout lookup code memory corruption (2D, 7143617) CVE-2012-1719 OpenJDK: mutable repository identifiers in generated stub code (CORBA, 7143851) CVE-2012-1718 OpenJDK: CRL and certificate extensions handling improvements (Security, 7143872) CVE-2012-1723 OpenJDK: insufficient field accessibility checks (HotSpot, 7152811) CVE-2012-1724 OpenJDK: XML parsing infinite loop (JAXP, 7157609) CVE-2012-1725 OpenJDK: insufficient invokespecial <init> verification (HotSpot, 7160757) CVE-2012-1721 Oracle JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment) CVE-2012-1722 Oracle JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment) CVE-2012-0551 Oracle JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment) cpe:/a:redhat:rhel_extras