title: Red Hat Security Advisory: java-1.6.0-sun security update
description: xml-security-1.3.0-1jpp.ep1.*: XMLDsig HMAC-based signatures spoofing and authentication bypass OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167) OpenJDK OpenType checks can be bypassed (6736293) JDK: XML parsing Denial-Of-Service (6845701) OpenJDK Untrusted applet System properties access (6738524) OpenJDK Proxy mechanism information leaks  (6801071) OpenJDK Proxy mechanism information leaks  (6801071) OpenJDK proxy mechanism allows non-authorized socket connections  (6801497) Java Web Start Buffer JPEG processing integer overflow (6823373) Java Web Start Buffer unpack200 processing integer overflow (6830335) JRE applet launcher vulnerability OpenJDK private variable information disclosure (6777487) JDK improper version selection JDK reposition of untrusted applet security icon in X11 JDK DoS with crafted .jnlp file JDK DoS with Swing Synthcontext implementation
cpes: cpe:/a:redhat:rhel_extras:4 cpe:/a:redhat:rhel_extras:5::client cpe:/a:redhat:rhel_extras:5::server