java-1.6.0-openjdk-1.6.0.40-1.13.12.6.AXS4

エラータID: AXSA:2016-642:04

Release date: 
Friday, August 26, 2016 - 18:48
Subject: 
java-1.6.0-openjdk-1.6.0.40-1.13.12.6.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

The OpenJDK runtime environment.

Security issues fixed with this release:

CVE-2016-3458
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92;
and Java SE Embedded 8u91 allows remote attackers to affect integrity
via vectors related to CORBA.
CVE-2016-3500
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92;
Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to
affect availability via vectors related to JAXP, a different
vulnerability than CVE-2016-3508.
CVE-2016-3508
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92;
Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to
affect availability via vectors related to JAXP, a different
vulnerability than CVE-2016-3500.
CVE-2016-3550
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and
Java SE Embedded 8u91 allows remote attackers to affect
confidentiality via vectors related to Hotspot.
CVE-2016-3606
Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 and Java SE
Embedded 8u91 allows remote attackers to affect confidentiality,
integrity, and availability via vectors related to Hotspot.

Solution: 

Update packages.

CVEs: 
CVE-2016-3458
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; and Java SE Embedded 8u91 allows remote attackers to affect integrity via vectors related to CORBA.
CVE-2016-3500
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3508.
CVE-2016-3508
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3500.
CVE-2016-3550
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality via vectors related to Hotspot.
CVE-2016-3606
Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.
Additional Info: 

N/A

Download: 

SRPMS
  1. java-1.6.0-openjdk-1.6.0.40-1.13.12.6.AXS4.src.rpm
    MD5: df9073edfe3c3c29650e2040406ad2f3
    SHA-256: 311335772d1edd2d8c2725c14272ae5d134030758eac83dd6a512b34ef31a5a8
    Size: 36.76 MB

Asianux Server 4 for x86
  1. java-1.6.0-openjdk-1.6.0.40-1.13.12.6.AXS4.i686.rpm
    MD5: 63933e79f82d17ed574d09273de0433c
    SHA-256: e894741b523d0f647f23b81c6a718c6004e7cf97110dc18fb5ac05a4b1e60553
    Size: 42.96 MB
  2. java-1.6.0-openjdk-devel-1.6.0.40-1.13.12.6.AXS4.i686.rpm
    MD5: abdd992ea3a751f22e198dcb8b9dbdd6
    SHA-256: e9c307a043392a132f4fa184a295200f3d415e9ccb324e1381984499743e414d
    Size: 14.58 MB
  3. java-1.6.0-openjdk-javadoc-1.6.0.40-1.13.12.6.AXS4.i686.rpm
    MD5: 63a00c7ef89698b4faae07cae2b338a8
    SHA-256: 70f1edcae80835cc68e7f6cbac6888275d0cce15e56e37263a1df586aae7a5aa
    Size: 14.63 MB

Asianux Server 4 for x86_64
  1. java-1.6.0-openjdk-1.6.0.40-1.13.12.6.AXS4.x86_64.rpm
    MD5: e944d3c0ce714f2ad32e9fbead22bec0
    SHA-256: 38b962ae2a6c01933edb95168f31e8d564c734691043761e87bf20a6a88cbbdc
    Size: 41.65 MB
  2. java-1.6.0-openjdk-devel-1.6.0.40-1.13.12.6.AXS4.x86_64.rpm
    MD5: 4b7207ffd2596bc1ba340661da3306cc
    SHA-256: 1fa303b890f4cc0d596d3940ad13979bc013737537264de798ca9efa0e900363
    Size: 14.58 MB
  3. java-1.6.0-openjdk-javadoc-1.6.0.40-1.13.12.6.AXS4.x86_64.rpm
    MD5: 2e5bd0244e423abc56f2c6607ec6b4ed
    SHA-256: e90038ff716dc12f8a6f870fc73b050cab5e74261ddf6f308f2e7742eadf1660
    Size: 14.63 MB