RHSA-2010:0339High

Red Hat Security Advisory: java-1.6.0-openjdk security update

Published
April 1, 2010
Last Modified
May 27, 2026

🔗 CVE IDs covered (16)

📋 Description

CVE-2009-3555 — TLS: MITM attacks via session renegotiation CVE-2010-0082 — OpenJDK Loader-constraint table allows arrays instead of only the base-classes (6626217) CVE-2010-0084 — OpenJDK Policy/PolicyFile leak dynamic ProtectionDomains. (6633872) CVE-2010-0085 — OpenJDK File TOCTOU deserialization vulnerability (6736390) CVE-2010-0088 — OpenJDK Inflater/Deflater clone issues (6745393) CVE-2010-0091 — OpenJDK Unsigned applet can retrieve the dragged information before drop action occurs(6887703) CVE-2010-0092 — OpenJDK AtomicReferenceArray causes SIGSEGV -> SEGV_MAPERR error (6888149) CVE-2010-0093 — OpenJDK System.arraycopy unable to reference elements beyond Integer.MAX_VALUE bytes (6892265) CVE-2010-0094 — OpenJDK Deserialization of RMIConnectionImpl objects should enforce stricter checks (6893947) CVE-2010-0095 — OpenJDK Subclasses of InetAddress may incorrectly interpret network addresses (6893954) CVE-2010-0837 — OpenJDK JAR "unpack200" must verify input parameters (6902299) CVE-2010-0838 — OpenJDK CMM readMabCurveData Buffer Overflow Vulnerability (6899653) CVE-2010-0840 — OpenJDK Applet Trusted Methods Chaining Privilege Escalation Vulnerability (6904691) CVE-2010-0845 — OpenJDK No ClassCastException for HashAttributeSet constructors if run with -Xcomp (6894807) CVE-2010-0847 — OpenJDK ImagingLib arbitrary code execution vulnerability (6914866) CVE-2010-0848 — OpenJDK AWT Library Invalid Index Vulnerability (6914823)

🔗 References (23)