Skip to content
OpenAdvisories
Critical RHSA-2010:0768 17 CVEs

Red Hat Security Advisory: java-1.6.0-openjdk security and bug fix update

Published Sep 15, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client java-1.6.0-openjdk 1:1.6.0.0-1.16.b17.el5
Red Hat · RHEL 5 enterprise_linux:5::client java-1.6.0-openjdk-debuginfo 1:1.6.0.0-1.16.b17.el5
Red Hat · RHEL 5 enterprise_linux:5::client java-1.6.0-openjdk-demo 1:1.6.0.0-1.16.b17.el5
Red Hat · RHEL 5 enterprise_linux:5::client java-1.6.0-openjdk-devel 1:1.6.0.0-1.16.b17.el5
Red Hat · RHEL 5 enterprise_linux:5::client java-1.6.0-openjdk-javadoc 1:1.6.0.0-1.16.b17.el5
Red Hat · RHEL 5 enterprise_linux:5::client java-1.6.0-openjdk-src 1:1.6.0.0-1.16.b17.el5
Red Hat · RHEL 5 enterprise_linux:5::server java-1.6.0-openjdk 1:1.6.0.0-1.16.b17.el5
Red Hat · RHEL 5 enterprise_linux:5::server java-1.6.0-openjdk-debuginfo 1:1.6.0.0-1.16.b17.el5
Red Hat · RHEL 5 enterprise_linux:5::server java-1.6.0-openjdk-demo 1:1.6.0.0-1.16.b17.el5
Red Hat · RHEL 5 enterprise_linux:5::server java-1.6.0-openjdk-devel 1:1.6.0.0-1.16.b17.el5
Red Hat · RHEL 5 enterprise_linux:5::server java-1.6.0-openjdk-javadoc 1:1.6.0.0-1.16.b17.el5
Red Hat · RHEL 5 enterprise_linux:5::server java-1.6.0-openjdk-src 1:1.6.0.0-1.16.b17.el5

Vulnerabilities 17

  • Critical 9.8
    CVE-2009-3555 Public exploit EPSS 87%

    Apache Tomcat affected by vulnerability in TLS and SSL protocol

    The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Serv…

    openssl apache2 org.apache.tomcat:tomcat nss Debian Maven
  • Unscored —
    CVE-2010-3541

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 2…

  • Unscored —
    CVE-2010-3548

    Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Bu…

  • Unscored —
    CVE-2010-3549

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 2…

  • Unscored —
    CVE-2010-3551

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 2…

  • Unscored —
    CVE-2010-3553

    Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.…

  • Unscored —
    CVE-2010-3554

    Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.…

  • Unscored —
    CVE-2010-3557

    Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.…

  • Unscored —
    CVE-2010-3561

    Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 …

  • Unscored —
    CVE-2010-3562

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2…

  • Unscored —
    CVE-2010-3564

    Unspecified vulnerability in the Oracle Communications Messaging Server (Sun Java System Messaging Server) component in…

  • Unscored —
    CVE-2010-3565

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1…

  • Unscored —
    CVE-2010-3567

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, and 5.0 Update 25 al…

  • Unscored —
    CVE-2010-3568

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21…

  • Unscored —
    CVE-2010-3569

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21…

  • Unscored —
    CVE-2010-3573 Public exploit EPSS 11%

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Updat…

  • Unscored —
    CVE-2010-3574

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 2…

References

  • article
    http://www.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/kb/docs/DOC-20491
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533125
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=618290
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=639876
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=639880
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=639897
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=639904
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=639909
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=639914
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=639920
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=639922
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=639925
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642167
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642180
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642187
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642197
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642202
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642215
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0768.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-3555
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3555
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3555
  • report
    https://access.redhat.com/security/cve/CVE-2010-3541
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3541
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3541
  • report
    https://access.redhat.com/security/cve/CVE-2010-3548
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3548
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3548
  • report
    https://access.redhat.com/security/cve/CVE-2010-3549
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3549
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3549
  • report
    https://access.redhat.com/security/cve/CVE-2010-3551
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3551
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3551
  • report
    https://access.redhat.com/security/cve/CVE-2010-3553
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3553
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3553
  • report
    https://access.redhat.com/security/cve/CVE-2010-3554