The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not verify the signature of the JRE that is downloaded, which allows remote attackers to execute arbitrary code via DNS man-in-the-middle attacks.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade dev-java/sun-jdk.Upgrade dev-java/blackdown-jdk.Upgrade dev-java/blackdown-jre.Upgrade app-emulation/emul-linux-x86-java.Upgrade dev-java/sun-jre-bin. | Oct 30, 2017 | Dec 5, 2008 |
| Suse | — | Upgrade java-1_6_0-sunUpgrade java-1_5_0-sun-srcUpgrade java-1_6_0-sun-alsaUpgrade java-1_6_0-sun-demoUpgrade java-1_5_0-sun-develUpgrade java-1_5_0-sun-demoUpgrade java-1_6_0-sun-jdbcUpgrade java-1_5_0-sunUpgrade java-1_5_0-sun-alsaUpgrade java-1_5_0-sun-pluginUpgrade java-1_5_0-sun-jdbcUpgrade java-1_6_0-sun-pluginUpgrade java2Upgrade java2-jreUpgrade java-1_6_0-sun-devel | Feb 17, 2015 | Dec 5, 2008 |
| Vmsa 2009 0014 | — | Upgrade VMware ESX 3.5 to build number 199239 | Nov 19, 2010 | Dec 5, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub