RHSA-2010:0337Critical

Red Hat Security Advisory: java-1.6.0-sun security update

Published
April 1, 2010
Last Modified
May 27, 2026

🔗 CVE IDs covered (26)

CVE-2010-0842 →CVE-2010-0088 →CVE-2010-0091 →CVE-2010-0840 →CVE-2010-0846 →CVE-2010-0847 →CVE-2010-0849 →CVE-2010-0094 →CVE-2010-0095 →CVE-2009-3555 →CVE-2010-0082 →CVE-2010-0084 →CVE-2010-0085 →CVE-2010-0087 →CVE-2010-0092 →CVE-2010-0089 →CVE-2010-0839 →CVE-2010-0843 →CVE-2010-0844 →CVE-2010-0845 →CVE-2010-0848 →CVE-2010-0837 →CVE-2010-0090 →CVE-2010-0093 →CVE-2010-0838 →CVE-2010-0841 →

📋 Description

CVE-2009-3555 — TLS: MITM attacks via session renegotiation CVE-2010-0082 — OpenJDK Loader-constraint table allows arrays instead of only the base-classes (6626217) CVE-2010-0084 — OpenJDK Policy/PolicyFile leak dynamic ProtectionDomains. (6633872) CVE-2010-0085 — OpenJDK File TOCTOU deserialization vulnerability (6736390) CVE-2010-0087 — JDK unspecified vulnerability in JWS/Plugin component CVE-2010-0088 — OpenJDK Inflater/Deflater clone issues (6745393) CVE-2010-0089 — JDK unspecified vulnerability in JavaWS/Plugin component CVE-2010-0090 — JDK unspecified vulnerability in JavaWS/Plugin component CVE-2010-0091 — OpenJDK Unsigned applet can retrieve the dragged information before drop action occurs(6887703) CVE-2010-0092 — OpenJDK AtomicReferenceArray causes SIGSEGV -> SEGV_MAPERR error (6888149) CVE-2010-0093 — OpenJDK System.arraycopy unable to reference elements beyond Integer.MAX_VALUE bytes (6892265) CVE-2010-0094 — OpenJDK Deserialization of RMIConnectionImpl objects should enforce stricter checks (6893947) CVE-2010-0095 — OpenJDK Subclasses of InetAddress may incorrectly interpret network addresses (6893954) CVE-2010-0837 — OpenJDK JAR "unpack200" must verify input parameters (6902299) CVE-2010-0838 — OpenJDK CMM readMabCurveData Buffer Overflow Vulnerability (6899653) CVE-2010-0839 — JDK multiple unspecified vulnerabilities CVE-2010-0840 — OpenJDK Applet Trusted Methods Chaining Privilege Escalation Vulnerability (6904691) CVE-2010-0841 — OpenJDK JPEGImageReader stepX Integer Overflow Vulnerability (6909597) CVE-2010-0842 — JDK multiple unspecified vulnerabilities CVE-2010-0843 — JDK multiple unspecified vulnerabilities CVE-2010-0844 — JDK multiple unspecified vulnerabilities CVE-2010-0845 — OpenJDK No ClassCastException for HashAttributeSet constructors if run with -Xcomp (6894807) CVE-2010-0846 — JDK unspecified vulnerability in ImageIO component CVE-2010-0847 — OpenJDK ImagingLib arbitrary code execution vulnerability (6914866) CVE-2010-0848 — OpenJDK AWT Library Invalid Index Vulnerability (6914823) CVE-2010-0849 — JDK unspecified vulnerability in Java2D component

🔗 References (28)