Skip to content
OpenAdvisories
Unscored RHSA-2009:0392 16 CVEs

Red Hat Security Advisory: java-1.6.0-sun security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-sun 1:1.6.0.13-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-sun-demo 1:1.6.0.13-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-sun-devel 1:1.6.0.13-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-sun-jdbc 1:1.6.0.13-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-sun-plugin 1:1.6.0.13-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-sun-src 1:1.6.0.13-1jpp.1.el4
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-sun 1:1.6.0.13-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-sun-demo 1:1.6.0.13-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-sun-devel 1:1.6.0.13-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-sun-jdbc 1:1.6.0.13-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-sun-plugin 1:1.6.0.13-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-sun-src 1:1.6.0.13-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-sun 1:1.6.0.13-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-sun-demo 1:1.6.0.13-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-sun-devel 1:1.6.0.13-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-sun-jdbc 1:1.6.0.13-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-sun-plugin 1:1.6.0.13-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-sun-src 1:1.6.0.13-1jpp.1.el5

Vulnerabilities 16

  • Unscored —
    CVE-2006-2426 Public exploit EPSS 13%

    Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows rem…

  • Unscored —
    CVE-2009-1093

    LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earli…

  • Unscored —
    CVE-2009-1094

    Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE…

  • Unscored —
    CVE-2009-1095

    Integer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and ear…

  • Unscored —
    CVE-2009-1096

    Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earl…

  • Unscored —
    CVE-2009-1097

    Multiple buffer overflows in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier a…

  • Unscored —
    CVE-2009-1098

    Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update…

  • Unscored —
    CVE-2009-1099

    Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier,…

  • Unscored —
    CVE-2009-1100

    Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 …

  • Unscored —
    CVE-2009-1101

    Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runti…

  • Unscored —
    CVE-2009-1102

    Unspecified vulnerability in the Virtual Machine in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 …

  • Unscored —
    CVE-2009-1103

    Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 U…

  • Unscored —
    CVE-2009-1104

    The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Updat…

  • Unscored —
    CVE-2009-1105

    The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 allows use…

  • Unscored —
    CVE-2009-1106

    The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 does not p…

  • Unscored —
    CVE-2009-1107

    The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 U…

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=492312
  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://blogs.sun.com/security/entry/advance_notification_of_security_updates4
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=395481
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490166
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490167
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490168
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490169
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490172
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490174
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=490178
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=492302
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=492305
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=492306
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=492308
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=492310
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=492309
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0392.json
  • report
    https://access.redhat.com/security/cve/CVE-2006-2426
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2426
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2426
  • report
    https://access.redhat.com/security/cve/CVE-2009-1093
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1093
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1093
  • report
    https://access.redhat.com/security/cve/CVE-2009-1094
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1094
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1094
  • report
    https://access.redhat.com/security/cve/CVE-2009-1095
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1095
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1095
  • report
    https://access.redhat.com/security/cve/CVE-2009-1096
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1096
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1096
  • report
    https://access.redhat.com/security/cve/CVE-2009-1097
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1097
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1097
  • report
    https://access.redhat.com/security/cve/CVE-2009-1098
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1098
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1098