title: Red Hat Security Advisory: java-1.6.0-openjdk security and bug fix update
description: xml-security-1.3.0-1jpp.ep1.*: XMLDsig HMAC-based signatures spoofing and authentication bypass OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167) OpenJDK OpenType checks can be bypassed (6736293) JDK: XML parsing Denial-Of-Service (6845701) OpenJDK Untrusted applet System properties access (6738524) OpenJDK Proxy mechanism information leaks  (6801071) OpenJDK Proxy mechanism information leaks  (6801071) OpenJDK proxy mechanism allows non-authorized socket connections  (6801497) Java Web Start Buffer JPEG processing integer overflow (6823373) Java Web Start Buffer unpack200 processing integer overflow (6830335) OpenJDK JDK13Services grants unnecessary privileges  (6777448) OpenJDK private variable information disclosure (6777487)
cpes: cpe:/o:redhat:enterprise_linux:5::client cpe:/o:redhat:enterprise_linux:5::server