Skip to content
OpenAdvisories
Low RHSA-2015:0086 14 CVEs

Red Hat Security Advisory: java-1.6.0-sun security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · Rhel Extras Oracle Java 5 rhel_extras_oracle_java:5 java-1.6.0-sun 1:1.6.0.91-1jpp.1.el5_11
Red Hat · Rhel Extras Oracle Java 5 rhel_extras_oracle_java:5 java-1.6.0-sun-demo 1:1.6.0.91-1jpp.1.el5_11
Red Hat · Rhel Extras Oracle Java 5 rhel_extras_oracle_java:5 java-1.6.0-sun-devel 1:1.6.0.91-1jpp.1.el5_11
Red Hat · Rhel Extras Oracle Java 5 rhel_extras_oracle_java:5 java-1.6.0-sun-jdbc 1:1.6.0.91-1jpp.1.el5_11
Red Hat · Rhel Extras Oracle Java 5 rhel_extras_oracle_java:5 java-1.6.0-sun-plugin 1:1.6.0.91-1jpp.1.el5_11
Red Hat · Rhel Extras Oracle Java 5 rhel_extras_oracle_java:5 java-1.6.0-sun-src 1:1.6.0.91-1jpp.1.el5_11
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.6.0-sun 1:1.6.0.91-1jpp.1.el6
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.6.0-sun-demo 1:1.6.0.91-1jpp.1.el6
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.6.0-sun-devel 1:1.6.0.91-1jpp.1.el6
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.6.0-sun-jdbc 1:1.6.0.91-1jpp.1.el6
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.6.0-sun-plugin 1:1.6.0.91-1jpp.1.el6
Red Hat · Rhel Extras Oracle Java 6 rhel_extras_oracle_java:6 java-1.6.0-sun-src 1:1.6.0.91-1jpp.1.el6
Red Hat · Rhel Extras Oracle Java 7 rhel_extras_oracle_java:7 java-1.6.0-sun 1:1.6.0.91-1jpp.1.el7
Red Hat · Rhel Extras Oracle Java 7 rhel_extras_oracle_java:7 java-1.6.0-sun-demo 1:1.6.0.91-1jpp.1.el7
Red Hat · Rhel Extras Oracle Java 7 rhel_extras_oracle_java:7 java-1.6.0-sun-devel 1:1.6.0.91-1jpp.1.el7
Red Hat · Rhel Extras Oracle Java 7 rhel_extras_oracle_java:7 java-1.6.0-sun-jdbc 1:1.6.0.91-1jpp.1.el7
Red Hat · Rhel Extras Oracle Java 7 rhel_extras_oracle_java:7 java-1.6.0-sun-plugin 1:1.6.0.91-1jpp.1.el7
Red Hat · Rhel Extras Oracle Java 7 rhel_extras_oracle_java:7 java-1.6.0-sun-src 1:1.6.0.91-1jpp.1.el7

Vulnerabilities 14

  • Low 3.4
    CVE-2014-3566 Public exploit EPSS 100%

    The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which ma…

    openssl openssl openjdk-7 wolfssl Debian Ubuntu
  • Unscored —
    CVE-2014-6585

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 icu icu Debian Ubuntu
  • Unscored —
    CVE-2014-6587

    Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrit…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6591

    Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attacke…

    openjdk-7 openjdk-6 icu icu Debian Ubuntu
  • Unscored —
    CVE-2014-6593 Public exploit EPSS 66%

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6601

    Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, int…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0383

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R2…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0395

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0403

    Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrit…

  • Unscored —
    CVE-2015-0406

    Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality and …

  • Unscored —
    CVE-2015-0407

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0408

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0410

    Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0412

    Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, int…

    openjdk-7 openjdk-6 Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152789#c82
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1123870
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152789
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183020
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183021
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183023
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183031
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183043
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183044
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183049
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183645
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183646
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183715
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1184275
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1184277
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0086.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3566
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3566
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3566
  • report
    https://access.redhat.com/security/cve/CVE-2014-6585
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6585
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6585
  • report
    https://access.redhat.com/security/cve/CVE-2014-6587
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6587
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6587
  • report
    https://access.redhat.com/security/cve/CVE-2014-6591
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6591
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6591
  • report
    https://access.redhat.com/security/cve/CVE-2014-6593
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6593
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6593
  • report
    https://access.redhat.com/security/cve/CVE-2014-6601
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6601
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6601
  • report
    https://access.redhat.com/security/cve/CVE-2015-0383
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0383
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0383