Description

Oracle Java SE version 6 includes the Oracle Java Runtime Environment andthe Oracle Java Software Development Kit.This update fixes several vulnerabilities in the Oracle Java RuntimeEnvironment and the Oracle Java Software Development Kit. Furtherinformation about these flaws can be found on the Oracle Java SE CriticalPatch Update Advisory page, listed in the References section.(CVE-2012-1541, CVE-2012-3213, CVE-2012-3342, CVE-2013-0351, CVE-2013-0409,CVE-2013-0419, CVE-2013-0423, CVE-2013-0424, CVE-2013-0425, CVE-2013-0426,CVE-2013-0427, CVE-2013-0428, CVE-2013-0429, CVE-2013-0430, CVE-2013-0432,CVE-2013-0433, CVE-2013-0434, CVE-2013-0435, CVE-2013-0438, CVE-2013-0440,CVE-2013-0441, CVE-2013-0442, CVE-2013-0443, CVE-2013-0445, CVE-2013-0446,CVE-2013-0450, CVE-2013-1473, CVE-2013-1475, CVE-2013-1476, CVE-2013-1478,CVE-2013-1480, CVE-2013-1481)All users of java-1.6.0-sun are advised to upgrade to these updatedpackages, which provide Oracle Java 6 Update 39. All running instances ofOracle Java must be restarted for the update to take effect.

References

• BID-57687
• BID-57712
• CERT-TA13-032A
• CERT-VN-858729
• CVE-2012-1541
• CVE-2012-3213
• CVE-2012-3342
• CVE-2013-0351
• CVE-2013-0409
• CVE-2013-0419
• CVE-2013-0423
• CVE-2013-0424
• CVE-2013-0425
• CVE-2013-0426
• CVE-2013-0427
• CVE-2013-0428
• CVE-2013-0429
• CVE-2013-0430
• CVE-2013-0432
• CVE-2013-0433
• CVE-2013-0434
• CVE-2013-0435
• CVE-2013-0438
• CVE-2013-0440
• CVE-2013-0441
• CVE-2013-0442
• CVE-2013-0443
• CVE-2013-0445
• CVE-2013-0446
• CVE-2013-0450
• CVE-2013-1473
• CVE-2013-1475
• CVE-2013-1476
• CVE-2013-1478
• CVE-2013-1480
• CVE-2013-1481
• OVAL-OVAL15733
• OVAL-OVAL15832
• OVAL-OVAL15888
• OVAL-OVAL16013
• OVAL-OVAL16035
• OVAL-OVAL16045
• OVAL-OVAL16058
• OVAL-OVAL16074
• OVAL-OVAL16247
• OVAL-OVAL16287
• OVAL-OVAL16353
• OVAL-OVAL16384
• OVAL-OVAL16430
• OVAL-OVAL16476
• OVAL-OVAL16489
• OVAL-OVAL16496
• OVAL-OVAL16512
• OVAL-OVAL16519
• OVAL-OVAL16528
• OVAL-OVAL16530
• OVAL-OVAL16537
• OVAL-OVAL16550
• OVAL-OVAL16558
• OVAL-OVAL16566
• OVAL-OVAL16567
• OVAL-OVAL16582
• OVAL-OVAL16600
• OVAL-OVAL16613
• OVAL-OVAL16649
• OVAL-OVAL16652
• OVAL-OVAL16680
• OVAL-OVAL16703
• OVAL-OVAL18597
• OVAL-OVAL18641
• OVAL-OVAL18845
• OVAL-OVAL18869
• OVAL-OVAL19010
• OVAL-OVAL19048
• OVAL-OVAL19070
• OVAL-OVAL19078
• OVAL-OVAL19097
• OVAL-OVAL19102
• OVAL-OVAL19114
• OVAL-OVAL19119
• OVAL-OVAL19121
• OVAL-OVAL19126
• OVAL-OVAL19131
• OVAL-OVAL19170
• OVAL-OVAL19181
• OVAL-OVAL19198
• OVAL-OVAL19199
• OVAL-OVAL19229
• OVAL-OVAL19238
• OVAL-OVAL19240
• OVAL-OVAL19245
• OVAL-OVAL19261
• OVAL-OVAL19266
• OVAL-OVAL19268
• OVAL-OVAL19271
• OVAL-OVAL19272
• OVAL-OVAL19274
• OVAL-OVAL19282
• OVAL-OVAL19285
• OVAL-OVAL19286
• OVAL-OVAL19288
• OVAL-OVAL19289
• OVAL-OVAL19300
• OVAL-OVAL19304
• OVAL-OVAL19325
• OVAL-OVAL19342
• OVAL-OVAL19351
• OVAL-OVAL19363
• OVAL-OVAL19372
• OVAL-OVAL19382
• OVAL-OVAL19383
• OVAL-OVAL19397
• OVAL-OVAL19405
• OVAL-OVAL19423
• OVAL-OVAL19425
• OVAL-OVAL19426
• OVAL-OVAL19429
• OVAL-OVAL19430
• OVAL-OVAL19434
• OVAL-OVAL19437
• OVAL-OVAL19439
• OVAL-OVAL19454
• OVAL-OVAL19457
• OVAL-OVAL19459
• OVAL-OVAL19464
• OVAL-OVAL19466
• OVAL-OVAL19468
• OVAL-OVAL19471
• OVAL-OVAL19474
• OVAL-OVAL19475
• OVAL-OVAL19480
• OVAL-OVAL19483
• OVAL-OVAL19484
• OVAL-OVAL19485
• OVAL-OVAL19488
• OVAL-OVAL19489
• OVAL-OVAL19491
• OVAL-OVAL19499
• OVAL-OVAL19501
• OVAL-OVAL19502
• OVAL-OVAL19503
• OVAL-OVAL19504
• OVAL-OVAL19505
• OVAL-OVAL19507
• OVAL-OVAL19509
• OVAL-OVAL19520
• OVAL-OVAL19522
• OVAL-OVAL19529
• OVAL-OVAL19572
• OVAL-OVAL19593
• REDHAT-RHSA-2013:0236
• REDHAT-RHSA-2013:0237
• REDHAT-RHSA-2013:0245
• REDHAT-RHSA-2013:0246
• REDHAT-RHSA-2013:0247
• REDHAT-RHSA-2013:1455
• REDHAT-RHSA-2013:1456

Solution

Related Vulnerabilities

• Gentoo Linux: CVE-2013-0425: IcedTea JDK: Multiple vulnerabilities
• SUSE Linux Security Vulnerability: CVE-2013-0426
• RHSA-2013:0245: java-1.6.0-openjdk security update
• HP-UX: CVE-2013-0427: Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
• Gentoo Linux: CVE-2013-0428: IcedTea JDK: Multiple vulnerabilities
• Apple Java security update for CVE-2013-0427
• Gentoo Linux: CVE-2012-3213: Oracle JRE/JDK: Multiple vulnerabilities
• Gentoo Linux: CVE-2013-1478: IcedTea JDK: Multiple vulnerabilities
• SUSE Linux Security Vulnerability: CVE-2013-0351
• Gentoo Linux: CVE-2013-0419: Oracle JRE/JDK: Multiple vulnerabilities
• Apple Java security update for CVE-2013-0425
• Java CPU February 2013 Java Runtime Environment Libraries vulnerability (CVE-2013-0428)
• Apple Java security update for CVE-2013-0445
• Gentoo Linux: CVE-2013-0438: Oracle JRE/JDK: Multiple vulnerabilities
• HP-UX: CVE-2013-0423: Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
• Apple Java security update for CVE-2013-0438
• Java CPU February 2013 Java Runtime Environment RMI vulnerability (CVE-2013-0424)
• Apple Java security update for CVE-2013-0428
• HP-UX: CVE-2013-0445: Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
• SUSE Linux Security Vulnerability: CVE-2013-0433
• SUSE Linux Security Vulnerability: CVE-2013-0445
• SUSE Linux Security Vulnerability: CVE-2013-0450
• HP-UX: CVE-2013-1475: Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
• Gentoo Linux: CVE-2013-0445: Oracle JRE/JDK: Multiple vulnerabilities
• Apple Java security update for CVE-2013-0433
• USN-1724-1: OpenJDK vulnerabilities
• Apple Java security update for CVE-2013-0419
• HP-UX: CVE-2013-0443: Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
• Java CPU February 2013 Java Runtime Environment Libraries vulnerability (CVE-2013-0426)
• Java CPU February 2013 Java Runtime Environment AWT vulnerability (CVE-2013-1480)
• Gentoo Linux: CVE-2013-1480: IcedTea JDK: Multiple vulnerabilities
• Java CPU February 2013 Java Runtime Environment Libraries vulnerability (CVE-2013-0425)
• Java CPU February 2013 Java Runtime Environment JSSE vulnerability (CVE-2013-0440)
• RHSA-2013:0237: java-1.7.0-oracle security update
• HP-UX: CVE-2013-0435: Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
• Java CPU February 2013 Java Runtime Environment AWT vulnerability (CVE-2013-0445)
• Java CPU February 2013 Java Runtime Environment Deployment vulnerability (CVE-2012-1541)
• Java CPU February 2013 Java Runtime Environment Deployment vulnerability (CVE-2013-0423)
• Apple Java security update for CVE-2013-0435
• Java CPU February 2013 Java Runtime Environment CORBA vulnerability (CVE-2013-0429)
• SUSE Linux Security Vulnerability: CVE-2013-1473
• HP-UX: CVE-2013-0432: Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
• SUSE Linux Security Vulnerability: CVE-2013-0434
• HP-UX: CVE-2012-1541: Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
• Java CPU February 2013 Java Runtime Environment Deployment vulnerability (CVE-2013-0446)
• Java CPU February 2013 Java Runtime Environment JMX vulnerability (CVE-2013-0409)
• FreeBSD: java 7.x -- security manager bypass (CVE-2013-0433)
• HP-UX: CVE-2013-0419: Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
• SUSE Linux Security Vulnerability: CVE-2013-0440
• HP-UX: CVE-2013-0424: Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
• Gentoo Linux: CVE-2013-0434: IcedTea JDK: Multiple vulnerabilities
• SUSE Linux Security Vulnerability: CVE-2013-1476
• Apple Java security update for CVE-2013-0440
• Java CPU February 2013 Java Runtime Environment Deployment vulnerability (CVE-2013-0351)
• HP-UX: CVE-2013-0434: Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
• RHSA-2013:0247: java-1.7.0-openjdk security update
• Apple Java security update for CVE-2013-0434
• SUSE Linux Security Vulnerability: CVE-2013-0446
• Apple Java security update for CVE-2013-0443
• Apple Java security update for CVE-2013-1473
• RHSA-2012:1466: java-1.6.0-ibm security update
• Vulnerabilities deemed not relevant on Red Hat Enterprise Linux 5
• Java CPU February 2013 Java Runtime Environment 2D vulnerability (CVE-2013-1478)
• Gentoo Linux: CVE-2013-0426: IcedTea JDK: Multiple vulnerabilities
• SUSE Linux Security Vulnerability: CVE-2013-0432
• Apple Java security update for CVE-2013-0429
• Java CPU February 2013 Java Runtime Environment Networking vulnerability (CVE-2013-0433)
• SUSE Linux Security Vulnerability: CVE-2013-0427
• SUSE Linux Security Vulnerability: CVE-2013-0425
• Gentoo Linux: CVE-2013-0424: IcedTea JDK: Multiple vulnerabilities
• Java CPU February 2013 Java Runtime Environment Libraries vulnerability (CVE-2013-0427)
• Java CPU February 2013 Java Runtime Environment CORBA vulnerability (CVE-2013-0441)
• RHSA-2012:1467: java-1.7.0-ibm security update
• HP-UX: CVE-2013-0438: Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
• Gentoo Linux: CVE-2013-0432: IcedTea JDK: Multiple vulnerabilities
• SUSE Linux Security Vulnerability: CVE-2013-0424
• Java CPU February 2013 Java Runtime Environment JAX-WS vulnerability (CVE-2013-0435)
• Apple Java security update for CVE-2013-1478
• SUSE Linux Security Vulnerability: CVE-2013-0441
• HP-UX: CVE-2013-0450: Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
• Gentoo Linux: CVE-2013-0433: IcedTea JDK: Multiple vulnerabilities
• Java CPU February 2013 Java Runtime Environment AWT vulnerability (CVE-2013-0432)
• HP-UX: CVE-2012-3342: Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
• Apple Java security update for CVE-2013-0426
• HP-UX: CVE-2013-0442: Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
• RHSA-2013:0624: java-1.5.0-ibm security update
• Apple Java security update for CVE-2013-1481
• RHSA-2013:0625: java-1.6.0-ibm security update
• SUSE Linux Security Vulnerability: CVE-2012-3342
• HP-UX: CVE-2013-1480: Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
• Java CPU February 2013 Java Runtime Environment JMX vulnerability (CVE-2013-0450)
• Java CPU February 2013 Java Runtime Environment Scripting vulnerability (CVE-2012-3213)
• Apple Java security update for CVE-2013-1476
• Gentoo Linux: CVE-2012-3342: Oracle JRE/JDK: Multiple vulnerabilities
• Gentoo Linux: CVE-2013-0409: Oracle JRE/JDK: Multiple vulnerabilities
• Java CPU February 2013 Java Runtime Environment Deployment vulnerability (CVE-2013-0419)
• HP-UX: CVE-2013-0429: Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
• Apple Java security update for CVE-2013-0351
• Java CPU February 2013 Java Runtime Environment Deployment vulnerability (CVE-2013-1473)
• ELSA-2013-0245 Critical: Oracle Linux java-1.6.0-openjdk security update