Mandrake Security Advisory MDVSA-2009:137 (java-1.6.0-openjdk) Network Vulnerability

Summary

The remote host is missing an update to java-1.6.0-openjdk announced via advisory MDVSA-2009:137.

Solution

To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2009:137

Insight

Multiple security vulnerabilities has been identified and fixed in Little cms library embedded in OpenJDK. For details, please visit the referenced advisories. This update provides fixes for these issues. Update: java-1.6.0-openjdk requires rhino packages and these has been further updated. Affected: 2009.0, 2009.1

Severity

Classification

CVE	CVE-2006-2426, CVE-2009-0581, CVE-2009-0723, CVE-2009-0733, CVE-2009-0793, CVE-2009-0794, CVE-2009-1093, CVE-2009-1094, CVE-2009-1095, CVE-2009-1096, CVE-2009-1097, CVE-2009-1098, CVE-2009-1101, CVE-2009-1102

CVSS	Base Score: 10.0 AV:N/AC:L/Au:N/C:C/I:C/A:C

Related Vulnerabilities

Mandrake Security Advisory MDVSA-2009:137 (java-1.6.0-openjdk)
Mandrake Security Advisory MDVSA-2009:014 (mplayer)
Mandrake Security Advisory MDVSA-2009:132 (libsndfile)
Mandrake Security Advisory MDVSA-2009:078 (evolution-data-server)
Mandrake Security Advisory MDVSA-2009:101 (xpdf)

Take action and discover your vulnerabilities