CERT mailing list archives

Current Activity - Oracle Releases Sun Java SE 1.6.0_20


From: Current Activity <us-cert () us-cert gov>
Date: Fri, 16 Apr 2010 09:44:25 -0400

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

US-CERT Current Activity

Oracle Releases Sun Java SE 1.6.0_20

Original release date: April 16, 2010 at 9:13 am
Last revised: April 16, 2010 at 9:13 am


Oracle has released Sun Java SE 1.6.0_20 to address several
vulnerabilities. The release notes for this version of Java SE
indicate that these vulnerabilities are in Java Deployment Toolkit and
the new Java Plug-in. Exploitation of these vulnerabilities may allow
a remote, unauthenticated attacker to execute arbitrary code.

US-CERT encourages users and administrators to review the following
documents and apply any necessary updates or workarounds to help
mitigate the risks:
  * Oracle security alert CVE-2010-0886
  * Sun Java SE 1.6.0_20 release notes
  * US-CERT Vulnerability Note VU#886582

Relevant Url(s):
<http://java.sun.com/javase/6/webnotes/6u20.html>

<http://www.oracle.com/technology/deploy/security/alerts/alert-cve-2010-0886.html>

<http://www.kb.cert.org/vuls/id/886582>

====
This entry is available at
http://www.us-cert.gov/current/index.html#oracle_releases_sun_java_se

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iQEVAwUBS8hprD6pPKYJORa3AQKD7wgAxzCLHEPDKlHSa2M8B3WKbjzDyWL4UbQv
hCu5mE//DtHu44zPUN9iAkJbzQqEmbZc2B+hzo+PunqU6JLB57aTmvbHBKYim5pz
3OhqeTxpxmaY7iJ3tCpPAE/T1vs/7BkNSj8cJ7fvVGkeuPtOhru3VzzKqySJmm83
mfL7Owog4Obs5lZ1+omk0bu8KLySemf06HzRL7Qpnq0Hb8IsfJX93+K01YGxH89p
L4VjXc77m1za0qAIBx9JpYyfLBbtebgjYEeUzkE3djr3Whs76TJF0gLYJ+n7vfko
urBSNQ1md0ivlJhxZPR70ZEsiatj8baRCJelUt8yLGElz0rOmmYBJg==
=0CET
-----END PGP SIGNATURE-----


Current thread: