Skip to content
OpenAdvisories
Unscored RHSA-2009:1560 22 CVEs

Red Hat Security Advisory: java-1.6.0-sun security update

Published Sep 22, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-sun 1:1.6.0.17-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-sun-demo 1:1.6.0.17-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-sun-devel 1:1.6.0.17-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-sun-jdbc 1:1.6.0.17-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-sun-plugin 1:1.6.0.17-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-sun-src 1:1.6.0.17-1jpp.1.el4
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-sun 1:1.6.0.17-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-sun-demo 1:1.6.0.17-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-sun-devel 1:1.6.0.17-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-sun-jdbc 1:1.6.0.17-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-sun-plugin 1:1.6.0.17-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-sun-src 1:1.6.0.17-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-sun 1:1.6.0.17-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-sun-demo 1:1.6.0.17-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-sun-devel 1:1.6.0.17-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-sun-jdbc 1:1.6.0.17-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-sun-plugin 1:1.6.0.17-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-sun-src 1:1.6.0.17-1jpp.2.el5

Vulnerabilities 22

  • Unscored —
    CVE-2009-2409

    The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0…

    openssl nss Debian
  • Unscored —
    CVE-2009-3728

    Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java S…

  • Unscored —
    CVE-2009-3729

    Unspecified vulnerability in the TrueType font parsing functionality in Sun Java SE 5.0 before Update 22 and 6 before U…

  • Unscored —
    CVE-2009-3865

    The launch method in the Deployment Toolkit plugin in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 6 be…

  • Unscored —
    CVE-2009-3866

    The Java Web Start Installer in Sun Java SE in JDK and JRE 6 before Update 17 does not properly use security model perm…

  • Unscored —
    CVE-2009-3867 Public exploit EPSS 73%

    Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, …

  • Unscored —
    CVE-2009-3868

    Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and…

  • Unscored —
    CVE-2009-3869 Public exploit EPSS 65%

    Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment…

  • Unscored —
    CVE-2009-3871

    Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environme…

  • Unscored —
    CVE-2009-3872

    Unspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 be…

  • Unscored —
    CVE-2009-3873

    The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and J…

  • Unscored —
    CVE-2009-3874

    Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 befo…

  • Unscored —
    CVE-2009-3875

    The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22…

  • Unscored —
    CVE-2009-3876

    Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and J…

  • Unscored —
    CVE-2009-3877

    Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and J…

  • Unscored —
    CVE-2009-3879

    Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Up…

  • Unscored —
    CVE-2009-3880

    The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Up…

  • Unscored —
    CVE-2009-3881

    Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a r…

  • Unscored —
    CVE-2009-3882

    Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Updat…

  • Unscored —
    CVE-2009-3883

    Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL&F) feature in the Swing implementation …

  • Unscored —
    CVE-2009-3884

    The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote …

  • Unscored —
    CVE-2009-3886

    The Java Web Start implementation in Sun Java SE 6 before Update 17 does not properly handle the interaction between a …

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530300
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=532904
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=532906
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=532914
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533211
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533212
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533214
  • article
    http://blogs.sun.com/security/entry/advance_notification_of_security_updates6
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=510197
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530053
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530057
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530061
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530062
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530063
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530067
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530098
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530173
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530175
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530296
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530297
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533215
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1560.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-2409
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2409
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2409
  • report
    https://access.redhat.com/security/cve/CVE-2009-3728
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3728
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3728
  • report
    https://access.redhat.com/security/cve/CVE-2009-3729
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3729
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3729
  • report
    https://access.redhat.com/security/cve/CVE-2009-3865
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3865
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3865
  • report
    https://access.redhat.com/security/cve/CVE-2009-3866
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3866
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3866
  • report
    https://access.redhat.com/security/cve/CVE-2009-3867