Security Advisory Critical: java-1.6.0-sun security update

Advisory: RHSA-2017:0177-1
Type: Security Advisory
Severity: Critical
Issued on: 2017-01-19
Last updated on: 2017-01-19
Affected Products: Oracle Java for RHEL (v. 5 server)
Oracle Java for RHEL Desktop (v. 5 client)
Oracle Java for Red Hat Enterprise Linux Desktop (v. 6)
Oracle Java for Red Hat Enterprise Linux Desktop (v. 7)
Oracle Java for Red Hat Enterprise Linux HPC Node (v. 6)
Oracle Java for Red Hat Enterprise Linux HPC Node (v. 7)
Oracle Java for Red Hat Enterprise Linux Server (v. 6)
Oracle Java for Red Hat Enterprise Linux Server (v. 7)
Oracle Java for Red Hat Enterprise Linux Workstation (v. 6)
Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)
CVEs (cve.mitre.org): CVE-2016-5546
CVE-2016-5548
CVE-2016-5552
CVE-2017-3231
CVE-2017-3241
CVE-2017-3252
CVE-2017-3253
CVE-2017-3259
CVE-2017-3261
CVE-2017-3272

Details

An update for java-1.6.0-sun is now available for Oracle Java for Red Hat
Enterprise Linux 5, Oracle Java for Red Hat Enterprise Linux 6, and Oracle Java
for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of
Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a
detailed severity rating, is available for each vulnerability from the CVE
link(s) in the References section.

Oracle Java SE version 6 includes the Oracle Java Runtime Environment and the
Oracle Java Software Development Kit.

This update upgrades Oracle Java SE 6 to version 6 Update 141.

Security Fix(es):

* This update fixes multiple vulnerabilities in the Oracle Java Runtime
Environment and the Oracle Java Software Development Kit. Further information
about these flaws can be found on the Oracle Java SE Critical Patch Update
Advisory page, listed in the References section. (CVE-2016-2183, CVE-2016-5546,
CVE-2016-5548, CVE-2016-5552, CVE-2017-3231, CVE-2017-3241, CVE-2017-3252,
CVE-2017-3253, CVE-2017-3259, CVE-2017-3261, CVE-2017-3272)

This update mitigates the CVE-2016-2183 issue by adding 3DES cipher suites to
the list of legacy algorithms (defined using the jdk.tls.legacyAlgorithms
security property) so they are only used if connecting TLS/SSL client and server
do not share any other non-legacy cipher suite.


Solution

For details on how to apply this update, which includes the changes described in
this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of Oracle Java must be restarted for this update to take
effect.

Updated packages

Oracle Java for RHEL (v. 5 server)

IA-32:
java-1.6.0-sun-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: c731e415af9c33789ca7e3a4caafd4fb
SHA-256: dd4bcd802618050caca98f58a50b9e074b95b99a2116283ff1a79b998f832640
java-1.6.0-sun-demo-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: 85ce69dab184b94606aebce8d7a21dfe
SHA-256: c3a7bd1fe4d0e6fedf3efb0a70f6efdbf57b3e6277d2bddf688533446df68815
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: b1f9b921c18e15db997b5b3420570840
SHA-256: 44793be07d306f410b3af90a22f794ff9b6d4b7161f68870914e448e2b2c650d
java-1.6.0-sun-jdbc-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: b3250057ed8bd0b861ca84aad6c79b58
SHA-256: 59e2b4b3052f753761b5a19f515ece2210a5f402055c1e34a883c5e30635ba28
java-1.6.0-sun-plugin-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: 3bc21274ab2ac84512776c0851929f06
SHA-256: b6774db32fd6ba365fa140a8b1c251ceef3f9a4e2426b3f48d8ba755efc2e9b4
java-1.6.0-sun-src-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: 26da515f4781d530bd6f33074d44dc58
SHA-256: 86e629d46f562901b0dcbc01d09d45949023fcef439b5a6a3eabe5a236c33fa5
 
x86_64:
java-1.6.0-sun-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: c731e415af9c33789ca7e3a4caafd4fb
SHA-256: dd4bcd802618050caca98f58a50b9e074b95b99a2116283ff1a79b998f832640
java-1.6.0-sun-1.6.0.141-1jpp.1.el5_11.x86_64.rpm     MD5: 7403036d4f737c5dff8318055d17be6f
SHA-256: 5e20d32c8b5a7570913680ebc94137ebc3437650487e3be36b82511beaa53687
java-1.6.0-sun-demo-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: 85ce69dab184b94606aebce8d7a21dfe
SHA-256: c3a7bd1fe4d0e6fedf3efb0a70f6efdbf57b3e6277d2bddf688533446df68815
java-1.6.0-sun-demo-1.6.0.141-1jpp.1.el5_11.x86_64.rpm     MD5: 7eb3d56f7bd9475ab2d7bcabbf85402c
SHA-256: d95e79eecb010344268ced482651ce58d1a4f55c98f34c1fd3cb94714bc68960
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: b1f9b921c18e15db997b5b3420570840
SHA-256: 44793be07d306f410b3af90a22f794ff9b6d4b7161f68870914e448e2b2c650d
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el5_11.x86_64.rpm     MD5: 240528943c33e8c0e3dca24a7acca886
SHA-256: 3336aac701d09570791ea099b6afb581958f81ee6e1ecf34f797c78e83e1ae7a
java-1.6.0-sun-jdbc-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: b3250057ed8bd0b861ca84aad6c79b58
SHA-256: 59e2b4b3052f753761b5a19f515ece2210a5f402055c1e34a883c5e30635ba28
java-1.6.0-sun-jdbc-1.6.0.141-1jpp.1.el5_11.x86_64.rpm     MD5: 2d3bdfb33417e903f299606a325d0160
SHA-256: 4069a6f5f087b45c67aac06038a51f69926776fbcb03170da245993c8234b815
java-1.6.0-sun-plugin-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: 3bc21274ab2ac84512776c0851929f06
SHA-256: b6774db32fd6ba365fa140a8b1c251ceef3f9a4e2426b3f48d8ba755efc2e9b4
java-1.6.0-sun-plugin-1.6.0.141-1jpp.1.el5_11.x86_64.rpm     MD5: a808f9ac75a54ff7bd9fd52921e73eab
SHA-256: 3bac7628fadf8c8ea3df2ccfbbd04ab5270c1818da0a655538951f91834950c7
java-1.6.0-sun-src-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: 26da515f4781d530bd6f33074d44dc58
SHA-256: 86e629d46f562901b0dcbc01d09d45949023fcef439b5a6a3eabe5a236c33fa5
java-1.6.0-sun-src-1.6.0.141-1jpp.1.el5_11.x86_64.rpm     MD5: 014953aac9c0430a6f1fe713565f2329
SHA-256: dd74633bedf533f16aa78de136db15fe74248a2e29e0fcac3809bfc02ca51d0a
 
Oracle Java for RHEL Desktop (v. 5 client)

IA-32:
java-1.6.0-sun-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: c731e415af9c33789ca7e3a4caafd4fb
SHA-256: dd4bcd802618050caca98f58a50b9e074b95b99a2116283ff1a79b998f832640
java-1.6.0-sun-demo-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: 85ce69dab184b94606aebce8d7a21dfe
SHA-256: c3a7bd1fe4d0e6fedf3efb0a70f6efdbf57b3e6277d2bddf688533446df68815
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: b1f9b921c18e15db997b5b3420570840
SHA-256: 44793be07d306f410b3af90a22f794ff9b6d4b7161f68870914e448e2b2c650d
java-1.6.0-sun-jdbc-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: b3250057ed8bd0b861ca84aad6c79b58
SHA-256: 59e2b4b3052f753761b5a19f515ece2210a5f402055c1e34a883c5e30635ba28
java-1.6.0-sun-plugin-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: 3bc21274ab2ac84512776c0851929f06
SHA-256: b6774db32fd6ba365fa140a8b1c251ceef3f9a4e2426b3f48d8ba755efc2e9b4
java-1.6.0-sun-src-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: 26da515f4781d530bd6f33074d44dc58
SHA-256: 86e629d46f562901b0dcbc01d09d45949023fcef439b5a6a3eabe5a236c33fa5
 
x86_64:
java-1.6.0-sun-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: c731e415af9c33789ca7e3a4caafd4fb
SHA-256: dd4bcd802618050caca98f58a50b9e074b95b99a2116283ff1a79b998f832640
java-1.6.0-sun-1.6.0.141-1jpp.1.el5_11.x86_64.rpm     MD5: 7403036d4f737c5dff8318055d17be6f
SHA-256: 5e20d32c8b5a7570913680ebc94137ebc3437650487e3be36b82511beaa53687
java-1.6.0-sun-demo-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: 85ce69dab184b94606aebce8d7a21dfe
SHA-256: c3a7bd1fe4d0e6fedf3efb0a70f6efdbf57b3e6277d2bddf688533446df68815
java-1.6.0-sun-demo-1.6.0.141-1jpp.1.el5_11.x86_64.rpm     MD5: 7eb3d56f7bd9475ab2d7bcabbf85402c
SHA-256: d95e79eecb010344268ced482651ce58d1a4f55c98f34c1fd3cb94714bc68960
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: b1f9b921c18e15db997b5b3420570840
SHA-256: 44793be07d306f410b3af90a22f794ff9b6d4b7161f68870914e448e2b2c650d
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el5_11.x86_64.rpm     MD5: 240528943c33e8c0e3dca24a7acca886
SHA-256: 3336aac701d09570791ea099b6afb581958f81ee6e1ecf34f797c78e83e1ae7a
java-1.6.0-sun-jdbc-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: b3250057ed8bd0b861ca84aad6c79b58
SHA-256: 59e2b4b3052f753761b5a19f515ece2210a5f402055c1e34a883c5e30635ba28
java-1.6.0-sun-jdbc-1.6.0.141-1jpp.1.el5_11.x86_64.rpm     MD5: 2d3bdfb33417e903f299606a325d0160
SHA-256: 4069a6f5f087b45c67aac06038a51f69926776fbcb03170da245993c8234b815
java-1.6.0-sun-plugin-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: 3bc21274ab2ac84512776c0851929f06
SHA-256: b6774db32fd6ba365fa140a8b1c251ceef3f9a4e2426b3f48d8ba755efc2e9b4
java-1.6.0-sun-plugin-1.6.0.141-1jpp.1.el5_11.x86_64.rpm     MD5: a808f9ac75a54ff7bd9fd52921e73eab
SHA-256: 3bac7628fadf8c8ea3df2ccfbbd04ab5270c1818da0a655538951f91834950c7
java-1.6.0-sun-src-1.6.0.141-1jpp.1.el5_11.i586.rpm     MD5: 26da515f4781d530bd6f33074d44dc58
SHA-256: 86e629d46f562901b0dcbc01d09d45949023fcef439b5a6a3eabe5a236c33fa5
java-1.6.0-sun-src-1.6.0.141-1jpp.1.el5_11.x86_64.rpm     MD5: 014953aac9c0430a6f1fe713565f2329
SHA-256: dd74633bedf533f16aa78de136db15fe74248a2e29e0fcac3809bfc02ca51d0a
 
Oracle Java for Red Hat Enterprise Linux Desktop (v. 6)

IA-32:
java-1.6.0-sun-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: 137c41e7254c5e02c1d18dc4697651d0
SHA-256: f44d24933d711ee9cb534b6fc94adf8fc4403e57c6cc83c6a605346e3612a202
java-1.6.0-sun-demo-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: 8070e410a993aaae30b8d278f5e0d647
SHA-256: 71b9ed3d3bbc8c60d2e8b79e3c32a548949622bd33ec2b12da663c6f0b0ff15d
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: d174b7c60f4a1b59d65e390c56642bda
SHA-256: 1237160c0ed98368b0968f67e20ad9134ccb1f5e978cc038429f906661fb1ab2
java-1.6.0-sun-jdbc-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: de4d115e4b5b7b6181cd5b9c23ec5436
SHA-256: 1152e97389fad13a2664403b6837b6306d1730780917132b158f2388b0769fe6
java-1.6.0-sun-plugin-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: 0a111dc62202f0616c39431796bb3976
SHA-256: 8d4440885aba127a4fa5919bf52a947ecebce5bbe0f705049dcdbea4b7fcb2e1
java-1.6.0-sun-src-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: 1a7ab7a129e97b599667dec650bffe46
SHA-256: 6484d6008dadc0f6f69f1730ba7559c06f8fb6793fcd76a2b312306d549f3cd8
 
x86_64:
java-1.6.0-sun-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: 137c41e7254c5e02c1d18dc4697651d0
SHA-256: f44d24933d711ee9cb534b6fc94adf8fc4403e57c6cc83c6a605346e3612a202
java-1.6.0-sun-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 1d2c0456beea655286771b59cf26acd0
SHA-256: f150758c9c14a9edd68883dafd5452891b2abc8bfaa81a8eee6c52d4e269c057
java-1.6.0-sun-demo-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 6049dc6d8af372b06112761650f7f43f
SHA-256: 87f393b700370c71a530897d31ef14e41ee55d38df31a4aa594c3224febdfa3b
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: d174b7c60f4a1b59d65e390c56642bda
SHA-256: 1237160c0ed98368b0968f67e20ad9134ccb1f5e978cc038429f906661fb1ab2
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 32d14d812167d8895f7347e8ff448f41
SHA-256: 83e774e6149f20e483ed1186045be7e17d93c71830df9b467cbb9f62ded424d6
java-1.6.0-sun-jdbc-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: b7aed45d321cffdf52d087526c562dca
SHA-256: 9306b74f973c8ad71d0dd7565d9689e154ee0d5580a32aaf026e5f19c8abd6e3
java-1.6.0-sun-plugin-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: b7663b88ace10a9a6070e5ee358b832b
SHA-256: 1e19216f631d84d8de316d24c5ff6b29f4dc70a09de42c6511cc464b8f2814b6
java-1.6.0-sun-src-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 15a4e46c41292257a60a9ec55196f5f5
SHA-256: a41e2143f21ac3cd2de11308f6cbfc78798f28d42b93a496d3bbe000af046d3b
 
Oracle Java for Red Hat Enterprise Linux Desktop (v. 7)

x86_64:
java-1.6.0-sun-1.6.0.141-1jpp.1.el7_3.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: 3e26da75f342ec1d089a388fe86cbc48
SHA-256: 1103ed35b044294d66bcbd9adade1d50c1e16c9bcf1e4d0e9fde9df4cdae9c88
java-1.6.0-sun-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 4938482bcfba8301c2a22fe2b5a7695d
SHA-256: d8aa91ed4fd28287b49f68f244e7a8fe6ad8ec544b7802336fa8aed7849ed00f
java-1.6.0-sun-demo-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 88f2ae1128e3b03d99efd08a56a24d1a
SHA-256: 460faf6ed5535d7f534bdde54fd27ccd52786f54fbbd10a1c79d95fade5604ff
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el7_3.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: dc0fe6a72a074d57e3e285b3e5f43cc1
SHA-256: 07d7e7ca9c9d4771e640cfcc9e6cefd258e2bd72ed4a0b5f89f794c85b5f138c
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 632bf3b8276a914125a22727cdfb84e3
SHA-256: 28c89f4bf5fd50069212aab032bddca5b413bd9cbb14df6d897e0e403ed8558a
java-1.6.0-sun-jdbc-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: f0de26c976e160bf0892396e103c5c85
SHA-256: f82f87344394b837763b730e27d1bfc25a7d92ba8975f5875f309b9c3d5b1c3f
java-1.6.0-sun-plugin-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 1380be3a6ca8f4e84501ace62820f369
SHA-256: 456d6b70622740bbe9118e48d86c64a2e2430853af5c4418e222bd6dba0c4c21
java-1.6.0-sun-src-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 7b6afe03570874da96527b48c6d14a95
SHA-256: bb22f31a2a60cd2081bb17224fee7224171fd194b900a2b53547c935858192f2
 
Oracle Java for Red Hat Enterprise Linux HPC Node (v. 6)

x86_64:
java-1.6.0-sun-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: 137c41e7254c5e02c1d18dc4697651d0
SHA-256: f44d24933d711ee9cb534b6fc94adf8fc4403e57c6cc83c6a605346e3612a202
java-1.6.0-sun-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 1d2c0456beea655286771b59cf26acd0
SHA-256: f150758c9c14a9edd68883dafd5452891b2abc8bfaa81a8eee6c52d4e269c057
java-1.6.0-sun-demo-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 6049dc6d8af372b06112761650f7f43f
SHA-256: 87f393b700370c71a530897d31ef14e41ee55d38df31a4aa594c3224febdfa3b
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: d174b7c60f4a1b59d65e390c56642bda
SHA-256: 1237160c0ed98368b0968f67e20ad9134ccb1f5e978cc038429f906661fb1ab2
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 32d14d812167d8895f7347e8ff448f41
SHA-256: 83e774e6149f20e483ed1186045be7e17d93c71830df9b467cbb9f62ded424d6
java-1.6.0-sun-jdbc-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: b7aed45d321cffdf52d087526c562dca
SHA-256: 9306b74f973c8ad71d0dd7565d9689e154ee0d5580a32aaf026e5f19c8abd6e3
java-1.6.0-sun-plugin-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: b7663b88ace10a9a6070e5ee358b832b
SHA-256: 1e19216f631d84d8de316d24c5ff6b29f4dc70a09de42c6511cc464b8f2814b6
java-1.6.0-sun-src-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 15a4e46c41292257a60a9ec55196f5f5
SHA-256: a41e2143f21ac3cd2de11308f6cbfc78798f28d42b93a496d3bbe000af046d3b
 
Oracle Java for Red Hat Enterprise Linux HPC Node (v. 7)

x86_64:
java-1.6.0-sun-1.6.0.141-1jpp.1.el7_3.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: 3e26da75f342ec1d089a388fe86cbc48
SHA-256: 1103ed35b044294d66bcbd9adade1d50c1e16c9bcf1e4d0e9fde9df4cdae9c88
java-1.6.0-sun-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 4938482bcfba8301c2a22fe2b5a7695d
SHA-256: d8aa91ed4fd28287b49f68f244e7a8fe6ad8ec544b7802336fa8aed7849ed00f
java-1.6.0-sun-demo-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 88f2ae1128e3b03d99efd08a56a24d1a
SHA-256: 460faf6ed5535d7f534bdde54fd27ccd52786f54fbbd10a1c79d95fade5604ff
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el7_3.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: dc0fe6a72a074d57e3e285b3e5f43cc1
SHA-256: 07d7e7ca9c9d4771e640cfcc9e6cefd258e2bd72ed4a0b5f89f794c85b5f138c
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 632bf3b8276a914125a22727cdfb84e3
SHA-256: 28c89f4bf5fd50069212aab032bddca5b413bd9cbb14df6d897e0e403ed8558a
java-1.6.0-sun-jdbc-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: f0de26c976e160bf0892396e103c5c85
SHA-256: f82f87344394b837763b730e27d1bfc25a7d92ba8975f5875f309b9c3d5b1c3f
java-1.6.0-sun-plugin-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 1380be3a6ca8f4e84501ace62820f369
SHA-256: 456d6b70622740bbe9118e48d86c64a2e2430853af5c4418e222bd6dba0c4c21
java-1.6.0-sun-src-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 7b6afe03570874da96527b48c6d14a95
SHA-256: bb22f31a2a60cd2081bb17224fee7224171fd194b900a2b53547c935858192f2
 
Oracle Java for Red Hat Enterprise Linux Server (v. 6)

IA-32:
java-1.6.0-sun-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: 137c41e7254c5e02c1d18dc4697651d0
SHA-256: f44d24933d711ee9cb534b6fc94adf8fc4403e57c6cc83c6a605346e3612a202
java-1.6.0-sun-demo-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: 8070e410a993aaae30b8d278f5e0d647
SHA-256: 71b9ed3d3bbc8c60d2e8b79e3c32a548949622bd33ec2b12da663c6f0b0ff15d
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: d174b7c60f4a1b59d65e390c56642bda
SHA-256: 1237160c0ed98368b0968f67e20ad9134ccb1f5e978cc038429f906661fb1ab2
java-1.6.0-sun-jdbc-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: de4d115e4b5b7b6181cd5b9c23ec5436
SHA-256: 1152e97389fad13a2664403b6837b6306d1730780917132b158f2388b0769fe6
java-1.6.0-sun-plugin-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: 0a111dc62202f0616c39431796bb3976
SHA-256: 8d4440885aba127a4fa5919bf52a947ecebce5bbe0f705049dcdbea4b7fcb2e1
java-1.6.0-sun-src-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: 1a7ab7a129e97b599667dec650bffe46
SHA-256: 6484d6008dadc0f6f69f1730ba7559c06f8fb6793fcd76a2b312306d549f3cd8
 
x86_64:
java-1.6.0-sun-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: 137c41e7254c5e02c1d18dc4697651d0
SHA-256: f44d24933d711ee9cb534b6fc94adf8fc4403e57c6cc83c6a605346e3612a202
java-1.6.0-sun-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 1d2c0456beea655286771b59cf26acd0
SHA-256: f150758c9c14a9edd68883dafd5452891b2abc8bfaa81a8eee6c52d4e269c057
java-1.6.0-sun-demo-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 6049dc6d8af372b06112761650f7f43f
SHA-256: 87f393b700370c71a530897d31ef14e41ee55d38df31a4aa594c3224febdfa3b
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: d174b7c60f4a1b59d65e390c56642bda
SHA-256: 1237160c0ed98368b0968f67e20ad9134ccb1f5e978cc038429f906661fb1ab2
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 32d14d812167d8895f7347e8ff448f41
SHA-256: 83e774e6149f20e483ed1186045be7e17d93c71830df9b467cbb9f62ded424d6
java-1.6.0-sun-jdbc-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: b7aed45d321cffdf52d087526c562dca
SHA-256: 9306b74f973c8ad71d0dd7565d9689e154ee0d5580a32aaf026e5f19c8abd6e3
java-1.6.0-sun-plugin-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: b7663b88ace10a9a6070e5ee358b832b
SHA-256: 1e19216f631d84d8de316d24c5ff6b29f4dc70a09de42c6511cc464b8f2814b6
java-1.6.0-sun-src-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 15a4e46c41292257a60a9ec55196f5f5
SHA-256: a41e2143f21ac3cd2de11308f6cbfc78798f28d42b93a496d3bbe000af046d3b
 
Oracle Java for Red Hat Enterprise Linux Server (v. 7)

x86_64:
java-1.6.0-sun-1.6.0.141-1jpp.1.el7_3.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: 3e26da75f342ec1d089a388fe86cbc48
SHA-256: 1103ed35b044294d66bcbd9adade1d50c1e16c9bcf1e4d0e9fde9df4cdae9c88
java-1.6.0-sun-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 4938482bcfba8301c2a22fe2b5a7695d
SHA-256: d8aa91ed4fd28287b49f68f244e7a8fe6ad8ec544b7802336fa8aed7849ed00f
java-1.6.0-sun-demo-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 88f2ae1128e3b03d99efd08a56a24d1a
SHA-256: 460faf6ed5535d7f534bdde54fd27ccd52786f54fbbd10a1c79d95fade5604ff
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el7_3.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: dc0fe6a72a074d57e3e285b3e5f43cc1
SHA-256: 07d7e7ca9c9d4771e640cfcc9e6cefd258e2bd72ed4a0b5f89f794c85b5f138c
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 632bf3b8276a914125a22727cdfb84e3
SHA-256: 28c89f4bf5fd50069212aab032bddca5b413bd9cbb14df6d897e0e403ed8558a
java-1.6.0-sun-jdbc-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: f0de26c976e160bf0892396e103c5c85
SHA-256: f82f87344394b837763b730e27d1bfc25a7d92ba8975f5875f309b9c3d5b1c3f
java-1.6.0-sun-plugin-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 1380be3a6ca8f4e84501ace62820f369
SHA-256: 456d6b70622740bbe9118e48d86c64a2e2430853af5c4418e222bd6dba0c4c21
java-1.6.0-sun-src-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 7b6afe03570874da96527b48c6d14a95
SHA-256: bb22f31a2a60cd2081bb17224fee7224171fd194b900a2b53547c935858192f2
 
Oracle Java for Red Hat Enterprise Linux Workstation (v. 6)

IA-32:
java-1.6.0-sun-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: 137c41e7254c5e02c1d18dc4697651d0
SHA-256: f44d24933d711ee9cb534b6fc94adf8fc4403e57c6cc83c6a605346e3612a202
java-1.6.0-sun-demo-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: 8070e410a993aaae30b8d278f5e0d647
SHA-256: 71b9ed3d3bbc8c60d2e8b79e3c32a548949622bd33ec2b12da663c6f0b0ff15d
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: d174b7c60f4a1b59d65e390c56642bda
SHA-256: 1237160c0ed98368b0968f67e20ad9134ccb1f5e978cc038429f906661fb1ab2
java-1.6.0-sun-jdbc-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: de4d115e4b5b7b6181cd5b9c23ec5436
SHA-256: 1152e97389fad13a2664403b6837b6306d1730780917132b158f2388b0769fe6
java-1.6.0-sun-plugin-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: 0a111dc62202f0616c39431796bb3976
SHA-256: 8d4440885aba127a4fa5919bf52a947ecebce5bbe0f705049dcdbea4b7fcb2e1
java-1.6.0-sun-src-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: 1a7ab7a129e97b599667dec650bffe46
SHA-256: 6484d6008dadc0f6f69f1730ba7559c06f8fb6793fcd76a2b312306d549f3cd8
 
x86_64:
java-1.6.0-sun-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: 137c41e7254c5e02c1d18dc4697651d0
SHA-256: f44d24933d711ee9cb534b6fc94adf8fc4403e57c6cc83c6a605346e3612a202
java-1.6.0-sun-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 1d2c0456beea655286771b59cf26acd0
SHA-256: f150758c9c14a9edd68883dafd5452891b2abc8bfaa81a8eee6c52d4e269c057
java-1.6.0-sun-demo-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 6049dc6d8af372b06112761650f7f43f
SHA-256: 87f393b700370c71a530897d31ef14e41ee55d38df31a4aa594c3224febdfa3b
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el6_8.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: d174b7c60f4a1b59d65e390c56642bda
SHA-256: 1237160c0ed98368b0968f67e20ad9134ccb1f5e978cc038429f906661fb1ab2
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 32d14d812167d8895f7347e8ff448f41
SHA-256: 83e774e6149f20e483ed1186045be7e17d93c71830df9b467cbb9f62ded424d6
java-1.6.0-sun-jdbc-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: b7aed45d321cffdf52d087526c562dca
SHA-256: 9306b74f973c8ad71d0dd7565d9689e154ee0d5580a32aaf026e5f19c8abd6e3
java-1.6.0-sun-plugin-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: b7663b88ace10a9a6070e5ee358b832b
SHA-256: 1e19216f631d84d8de316d24c5ff6b29f4dc70a09de42c6511cc464b8f2814b6
java-1.6.0-sun-src-1.6.0.141-1jpp.1.el6_8.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 15a4e46c41292257a60a9ec55196f5f5
SHA-256: a41e2143f21ac3cd2de11308f6cbfc78798f28d42b93a496d3bbe000af046d3b
 
Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)

x86_64:
java-1.6.0-sun-1.6.0.141-1jpp.1.el7_3.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: 3e26da75f342ec1d089a388fe86cbc48
SHA-256: 1103ed35b044294d66bcbd9adade1d50c1e16c9bcf1e4d0e9fde9df4cdae9c88
java-1.6.0-sun-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 4938482bcfba8301c2a22fe2b5a7695d
SHA-256: d8aa91ed4fd28287b49f68f244e7a8fe6ad8ec544b7802336fa8aed7849ed00f
java-1.6.0-sun-demo-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 88f2ae1128e3b03d99efd08a56a24d1a
SHA-256: 460faf6ed5535d7f534bdde54fd27ccd52786f54fbbd10a1c79d95fade5604ff
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el7_3.i686.rpm
File outdated by:  RHSA-2017:1119
    MD5: dc0fe6a72a074d57e3e285b3e5f43cc1
SHA-256: 07d7e7ca9c9d4771e640cfcc9e6cefd258e2bd72ed4a0b5f89f794c85b5f138c
java-1.6.0-sun-devel-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 632bf3b8276a914125a22727cdfb84e3
SHA-256: 28c89f4bf5fd50069212aab032bddca5b413bd9cbb14df6d897e0e403ed8558a
java-1.6.0-sun-jdbc-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: f0de26c976e160bf0892396e103c5c85
SHA-256: f82f87344394b837763b730e27d1bfc25a7d92ba8975f5875f309b9c3d5b1c3f
java-1.6.0-sun-plugin-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 1380be3a6ca8f4e84501ace62820f369
SHA-256: 456d6b70622740bbe9118e48d86c64a2e2430853af5c4418e222bd6dba0c4c21
java-1.6.0-sun-src-1.6.0.141-1jpp.1.el7_3.x86_64.rpm
File outdated by:  RHSA-2017:1119
    MD5: 7b6afe03570874da96527b48c6d14a95
SHA-256: bb22f31a2a60cd2081bb17224fee7224171fd194b900a2b53547c935858192f2
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

1369383 - CVE-2016-2183 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)
1413554 - CVE-2017-3272 OpenJDK: insufficient protected field access checks in atomic field updaters (Libraries, 8165344)
1413583 - CVE-2017-3253 OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)
1413653 - CVE-2017-3261 OpenJDK: integer overflow in SocketOutputStream boundary check (Networking, 8164147)
1413717 - CVE-2017-3231 OpenJDK: URLClassLoader insufficient access control checks (Networking, 8151934)
1413882 - CVE-2016-5552 OpenJDK: incorrect URL parsing in URLStreamHandler (Networking, 8167223)
1413906 - CVE-2017-3252 OpenJDK: LdapLoginModule incorrect userDN extraction (JAAS, 8161743)
1413911 - CVE-2016-5546 OpenJDK: incorrect ECDSA signature extraction from the DER input (Libraries, 8168714)
1413920 - CVE-2016-5548 OpenJDK: DSA implementation timing attack (Libraries, 8168728)
1413955 - CVE-2017-3241 OpenJDK: untrusted input deserialization in RMI registry and DCG (RMI, 8156802)
1414163 - CVE-2017-3259 Oracle JDK: unspecified vulnerability fixed in 6u141, 7u131, and 8u121 (Deployment)


References



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/