{"cves":[{"id":"CVE-2012-3221","published":"2012-10-17T10:54:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Oracle VM Virtual Box component in Oracle\nVirtualization 3.2, 4.0, and 4.1 allows local users to affect availability\nvia unknown vectors related to VirtualBox Core.  NOTE: The previous\ninformation was obtained from the October 2012 CPU. Oracle has not\ncommented on claims from another vendor that this issue is related to\n\"incorrect interrupt handling.\"","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html","http://www.oracle.com/technetwork/topics/security/cpuoct2012verbose-1515934.html#OVIR","https://www.cve.org/CVERecord?id=CVE-2012-3221"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690777","https://bugs.launchpad.net/ubuntu/+source/virtualbox/+bug/1044634"],"patches":{"virtualbox-ose":["debdiff: https://bugs.launchpad.net/ubuntu/+source/virtualbox/+bug/1044634"],"virtualbox":["debdiff: https://bugs.launchpad.net/ubuntu/+source/virtualbox/+bug/1044634"]},"tags":{},"packages":[{"name":"virtualbox","source":"https://ubuntu.com/security/cve?package=virtualbox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=virtualbox","debian":"https://tracker.debian.org/pkg/virtualbox","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"4.1.2-dfsg-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"4.1.12-dfsg-2ubuntu0.2","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"4.1.18-dfsg-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"4.1.18-dfsg-1.1, 4.2","component":null,"pocket":"security"}]},{"name":"virtualbox-ose","source":"https://ubuntu.com/security/cve?package=virtualbox-ose","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=virtualbox-ose","debian":"https://tracker.debian.org/pkg/virtualbox-ose","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"3.1.6-dfsg-2ubuntu2.1","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"4.2","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2012-3155","published":"2012-10-16T23:55:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the CORBA ORB component in Sun GlassFish\nEnterprise Server 2.1.1, Oracle GlassFish Server 3.0.1 and 3.1.2, and Sun\nJava System Application Server 8.1 and 8.2 allows remote attackers to\naffect availability, related to CORBA ORB.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html","http://www.oracle.com/technetwork/topics/security/cpuoct2012verbose-1515934.html#SUNS","https://www.cve.org/CVERecord?id=CVE-2012-3155"],"bugs":[""],"patches":{"glassfish":[]},"tags":{},"packages":[{"name":"glassfish","source":"https://ubuntu.com/security/cve?package=glassfish","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=glassfish","debian":"https://tracker.debian.org/pkg/glassfish","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.1.1 end of life, 3.1.2.2","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was needed","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2012-5089","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0\nUpdate 36 and earlier allows remote attackers to affect confidentiality,\nintegrity, and availability, related to JMX, a different vulnerability than\nCVE-2012-3143.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"in lucid+, NetX and the plugin moved to the icedtea-web package"},{"author":"jdstrand","note":"openjdk-6b18 FTBFS on 11.04 (LP: #1043003)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2012verbose-1515981.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020571.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020556.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-5089"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"sun-java6":[],"sun-java5":[],"openjdk-6":[],"openjdk-6b18":[],"icedtea-web":[],"openjdk-7":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-6","source":"https://ubuntu.com/security/cve?package=openjdk-6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6","debian":"https://tracker.debian.org/pkg/openjdk-6","statuses":[{"release_codename":"hardy","status":"released","description":"6b27-1.12.3-0ubuntu1~08.04.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"6b24-1.11.5-0ubuntu1~10.04.2","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"6b24-1.11.5-0ubuntu1~11.04.1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"6b24-1.11.5-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"6b24-1.11.5-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"6b24-1.11.5-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-6b18","source":"https://ubuntu.com/security/cve?package=openjdk-6b18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6b18","debian":"https://tracker.debian.org/pkg/openjdk-6b18","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.1.3, 2.2.3, 2.3.3","component":null,"pocket":"security"}]},{"name":"sun-java5","source":"https://ubuntu.com/security/cve?package=sun-java5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java5","debian":"https://tracker.debian.org/pkg/sun-java5","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"end of life","component":null,"pocket":"security"}]},{"name":"sun-java6","source":"https://ubuntu.com/security/cve?package=sun-java6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java6","debian":"https://tracker.debian.org/pkg/sun-java6","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6 update 36","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]},{"id":"CVE-2012-5088","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect\nconfidentiality, integrity, and availability via unknown vectors related to\nLibraries.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2012verbose-1515981.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020571.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-5088"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"openjdk-7":[]},"tags":{},"packages":[{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"7u3-2.1.3-1, 2.1.3, 2.2.3, 2.3.3","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]},{"id":"CVE-2012-5087","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect\nconfidentiality, integrity, and availability via unknown vectors related to\nBeans.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2012verbose-1515981.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020571.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-5087"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"openjdk-7":[]},"tags":{},"packages":[{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"7u3-2.1.3-1, 2.1.3, 2.2.3, 2.3.3","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]},{"id":"CVE-2012-5086","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier,\nallows remote attackers to affect confidentiality, integrity, and\navailability via unknown vectors related to Beans.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"in lucid+, NetX and the plugin moved to the icedtea-web package"},{"author":"jdstrand","note":"openjdk-6b18 FTBFS on 11.04 (LP: #1043003)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2012verbose-1515981.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020571.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020556.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-5086"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"sun-java6":[],"sun-java5":[],"openjdk-6":[],"openjdk-6b18":[],"icedtea-web":[],"openjdk-7":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-6","source":"https://ubuntu.com/security/cve?package=openjdk-6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6","debian":"https://tracker.debian.org/pkg/openjdk-6","statuses":[{"release_codename":"hardy","status":"released","description":"6b27-1.12.3-0ubuntu1~08.04.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"6b24-1.11.5-0ubuntu1~10.04.2","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"6b24-1.11.5-0ubuntu1~11.04.1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"6b24-1.11.5-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"6b24-1.11.5-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"6b24-1.11.5-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-6b18","source":"https://ubuntu.com/security/cve?package=openjdk-6b18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6b18","debian":"https://tracker.debian.org/pkg/openjdk-6b18","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.1.3, 2.2.3, 2.3.3","component":null,"pocket":"security"}]},{"name":"sun-java5","source":"https://ubuntu.com/security/cve?package=sun-java5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java5","debian":"https://tracker.debian.org/pkg/sun-java5","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"end of life","component":null,"pocket":"security"}]},{"name":"sun-java6","source":"https://ubuntu.com/security/cve?package=sun-java6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java6","debian":"https://tracker.debian.org/pkg/sun-java6","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6 update 36","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]},{"id":"CVE-2012-5085","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0\nUpdate 36 and earlier, and 1.4.2_38 and earlier allows remote authenticated\nusers to have an unspecified impact via unknown vectors related to\nNetworking.  NOTE: the Oracle CPU states that this issue has a 0.0 CVSS\nscore. If so, then this is not a vulnerability and this issue should not be\nincluded in CVE.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"in lucid+, NetX and the plugin moved to the icedtea-web package"},{"author":"jdstrand","note":"openjdk-6b18 FTBFS on 11.04 (LP: #1043003)"}],"codename":null,"priority":"negligible","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2012verbose-1515981.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020571.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020556.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-5085"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"sun-java6":[],"sun-java5":[],"openjdk-6":[],"openjdk-6b18":[],"icedtea-web":[],"openjdk-7":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-6","source":"https://ubuntu.com/security/cve?package=openjdk-6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6","debian":"https://tracker.debian.org/pkg/openjdk-6","statuses":[{"release_codename":"hardy","status":"released","description":"6b27-1.12.3-0ubuntu1~08.04.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"6b24-1.11.5-0ubuntu1~10.04.2","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"6b24-1.11.5-0ubuntu1~11.04.1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"6b24-1.11.5-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"6b24-1.11.5-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"6b24-1.11.5-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-6b18","source":"https://ubuntu.com/security/cve?package=openjdk-6b18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6b18","debian":"https://tracker.debian.org/pkg/openjdk-6b18","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.1.3, 2.2.3, 2.3.3","component":null,"pocket":"security"}]},{"name":"sun-java5","source":"https://ubuntu.com/security/cve?package=sun-java5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java5","debian":"https://tracker.debian.org/pkg/sun-java5","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"end of life","component":null,"pocket":"security"}]},{"name":"sun-java6","source":"https://ubuntu.com/security/cve?package=sun-java6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java6","debian":"https://tracker.debian.org/pkg/sun-java6","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6 update 36","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]},{"id":"CVE-2012-5084","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0\nUpdate 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to\naffect confidentiality, integrity, and availability via unknown vectors\nrelated to Swing.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"in lucid+, NetX and the plugin moved to the icedtea-web package"},{"author":"jdstrand","note":"openjdk-6b18 FTBFS on 11.04 (LP: #1043003)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2012verbose-1515981.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020571.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020556.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-5084"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"sun-java6":[],"sun-java5":[],"openjdk-6":[],"openjdk-6b18":[],"icedtea-web":[],"openjdk-7":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-6","source":"https://ubuntu.com/security/cve?package=openjdk-6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6","debian":"https://tracker.debian.org/pkg/openjdk-6","statuses":[{"release_codename":"hardy","status":"released","description":"6b27-1.12.3-0ubuntu1~08.04.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"6b24-1.11.5-0ubuntu1~10.04.2","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"6b24-1.11.5-0ubuntu1~11.04.1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"6b24-1.11.5-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"6b24-1.11.5-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"6b24-1.11.5-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-6b18","source":"https://ubuntu.com/security/cve?package=openjdk-6b18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6b18","debian":"https://tracker.debian.org/pkg/openjdk-6b18","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.1.3, 2.2.3, 2.3.3","component":null,"pocket":"security"}]},{"name":"sun-java5","source":"https://ubuntu.com/security/cve?package=sun-java5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java5","debian":"https://tracker.debian.org/pkg/sun-java5","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"end of life","component":null,"pocket":"security"}]},{"name":"sun-java6","source":"https://ubuntu.com/security/cve?package=sun-java6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java6","debian":"https://tracker.debian.org/pkg/sun-java6","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6 update 36","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]},{"id":"CVE-2012-5083","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0\nUpdate 36 and earlier, 1.4.2_38 and earlier, and JavaFX 2.2 and earlier\nallows remote attackers to affect confidentiality, integrity, and\navailability via unknown vectors related to 2D.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"in lucid+, NetX and the plugin moved to the icedtea-web package"},{"author":"jdstrand","note":"openjdk-6b18 FTBFS on 11.04 (LP: #1043003)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2012verbose-1515981.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020571.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020556.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-5083"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"sun-java6":[],"sun-java5":[],"openjdk-6":[],"openjdk-6b18":[],"icedtea-web":[],"openjdk-7":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-6","source":"https://ubuntu.com/security/cve?package=openjdk-6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6","debian":"https://tracker.debian.org/pkg/openjdk-6","statuses":[{"release_codename":"hardy","status":"released","description":"6b27-1.12.3-0ubuntu1~08.04.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"6b24-1.11.5-0ubuntu1~10.04.2","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"6b24-1.11.5-0ubuntu1~11.04.1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"6b24-1.11.5-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"6b24-1.11.5-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"6b24-1.11.5-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-6b18","source":"https://ubuntu.com/security/cve?package=openjdk-6b18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6b18","debian":"https://tracker.debian.org/pkg/openjdk-6b18","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.1.3, 2.2.3, 2.3.3","component":null,"pocket":"security"}]},{"name":"sun-java5","source":"https://ubuntu.com/security/cve?package=sun-java5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java5","debian":"https://tracker.debian.org/pkg/sun-java5","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"end of life","component":null,"pocket":"security"}]},{"name":"sun-java6","source":"https://ubuntu.com/security/cve?package=sun-java6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java6","debian":"https://tracker.debian.org/pkg/sun-java6","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6 update 36","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]},{"id":"CVE-2012-5081","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0\nUpdate 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to\naffect availability, related to JSSE.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"in lucid+, NetX and the plugin moved to the icedtea-web package"},{"author":"jdstrand","note":"openjdk-6b18 FTBFS on 11.04 (LP: #1043003)"}],"codename":null,"priority":"low","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2012verbose-1515981.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020556.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020571.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-5081"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"sun-java6":[],"sun-java5":[],"openjdk-6":[],"openjdk-6b18":[],"icedtea-web":[],"openjdk-7":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-6","source":"https://ubuntu.com/security/cve?package=openjdk-6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6","debian":"https://tracker.debian.org/pkg/openjdk-6","statuses":[{"release_codename":"hardy","status":"released","description":"6b27-1.12.3-0ubuntu1~08.04.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"6b24-1.11.5-0ubuntu1~10.04.2","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"6b24-1.11.5-0ubuntu1~11.04.1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"6b24-1.11.5-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"6b24-1.11.5-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"6b24-1.11.5-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-6b18","source":"https://ubuntu.com/security/cve?package=openjdk-6b18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6b18","debian":"https://tracker.debian.org/pkg/openjdk-6b18","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.1.3, 2.2.3, 2.3.3","component":null,"pocket":"security"}]},{"name":"sun-java5","source":"https://ubuntu.com/security/cve?package=sun-java5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java5","debian":"https://tracker.debian.org/pkg/sun-java5","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"end of life","component":null,"pocket":"security"}]},{"name":"sun-java6","source":"https://ubuntu.com/security/cve?package=sun-java6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java6","debian":"https://tracker.debian.org/pkg/sun-java6","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6 update 36","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]},{"id":"CVE-2012-5079","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0\nUpdate 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to\naffect integrity via unknown vectors related to Libraries, a different\nvulnerability than CVE-2012-5073.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"in lucid+, NetX and the plugin moved to the icedtea-web package"},{"author":"jdstrand","note":"openjdk-6b18 FTBFS on 11.04 (LP: #1043003)"},{"author":"seth-arnold","note":"typo \"CVE-2012-5979\" in IcedTea release notes`"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2012verbose-1515981.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020556.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-5079"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"sun-java6":[],"sun-java5":[],"openjdk-6":[],"openjdk-6b18":[],"icedtea-web":[],"openjdk-7":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-6","source":"https://ubuntu.com/security/cve?package=openjdk-6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6","debian":"https://tracker.debian.org/pkg/openjdk-6","statuses":[{"release_codename":"hardy","status":"released","description":"6b27-1.12.3-0ubuntu1~08.04.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"6b24-1.11.5-0ubuntu1~10.04.2","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"6b24-1.11.5-0ubuntu1~11.04.1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"6b24-1.11.5-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"6b24-1.11.5-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"6b24-1.11.5-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-6b18","source":"https://ubuntu.com/security/cve?package=openjdk-6b18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6b18","debian":"https://tracker.debian.org/pkg/openjdk-6b18","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.1.3, 2.2.3, 2.3.3","component":null,"pocket":"security"}]},{"name":"sun-java5","source":"https://ubuntu.com/security/cve?package=sun-java5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java5","debian":"https://tracker.debian.org/pkg/sun-java5","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"end of life","component":null,"pocket":"security"}]},{"name":"sun-java6","source":"https://ubuntu.com/security/cve?package=sun-java6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java6","debian":"https://tracker.debian.org/pkg/sun-java6","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6 update 36","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]},{"id":"CVE-2012-5077","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0\nUpdate 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to\naffect confidentiality via unknown vectors related to Security.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"in lucid+, NetX and the plugin moved to the icedtea-web package"},{"author":"jdstrand","note":"openjdk-6b18 FTBFS on 11.04 (LP: #1043003)"}],"codename":null,"priority":"low","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2012verbose-1515981.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020571.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020556.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-5077"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"sun-java6":[],"sun-java5":[],"openjdk-6":[],"openjdk-6b18":[],"icedtea-web":[],"openjdk-7":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-6","source":"https://ubuntu.com/security/cve?package=openjdk-6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6","debian":"https://tracker.debian.org/pkg/openjdk-6","statuses":[{"release_codename":"hardy","status":"released","description":"6b27-1.12.3-0ubuntu1~08.04.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"6b24-1.11.5-0ubuntu1~10.04.2","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"6b24-1.11.5-0ubuntu1~11.04.1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"6b24-1.11.5-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"6b24-1.11.5-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"6b24-1.11.5-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-6b18","source":"https://ubuntu.com/security/cve?package=openjdk-6b18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6b18","debian":"https://tracker.debian.org/pkg/openjdk-6b18","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.1.3, 2.2.3, 2.3.3","component":null,"pocket":"security"}]},{"name":"sun-java5","source":"https://ubuntu.com/security/cve?package=sun-java5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java5","debian":"https://tracker.debian.org/pkg/sun-java5","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"end of life","component":null,"pocket":"security"}]},{"name":"sun-java6","source":"https://ubuntu.com/security/cve?package=sun-java6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java6","debian":"https://tracker.debian.org/pkg/sun-java6","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6 update 36","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]},{"id":"CVE-2012-5076","published":"2012-10-16T00:00:00","updated_at":"2025-08-25T20:38:29.444988+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect\nconfidentiality, integrity, and availability, related to JAX-WS.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020571.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-5076","https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"openjdk-7":[]},"tags":{},"packages":[{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"7u3-2.1.3-1, 2.1.3, 2.2.3, 2.3.3","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]},{"id":"CVE-2012-5075","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0\nUpdate 36 and earlier allows remote attackers to affect confidentiality,\nrelated to JMX.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"in lucid+, NetX and the plugin moved to the icedtea-web package"},{"author":"jdstrand","note":"openjdk-6b18 FTBFS on 11.04 (LP: #1043003)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2012verbose-1515981.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020571.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020556.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-5075"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"sun-java6":[],"sun-java5":[],"openjdk-6":[],"openjdk-6b18":[],"icedtea-web":[],"openjdk-7":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-6","source":"https://ubuntu.com/security/cve?package=openjdk-6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6","debian":"https://tracker.debian.org/pkg/openjdk-6","statuses":[{"release_codename":"hardy","status":"released","description":"6b27-1.12.3-0ubuntu1~08.04.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"6b24-1.11.5-0ubuntu1~10.04.2","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"6b24-1.11.5-0ubuntu1~11.04.1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"6b24-1.11.5-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"6b24-1.11.5-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"6b24-1.11.5-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-6b18","source":"https://ubuntu.com/security/cve?package=openjdk-6b18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6b18","debian":"https://tracker.debian.org/pkg/openjdk-6b18","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.1.3, 2.2.3, 2.3.3","component":null,"pocket":"security"}]},{"name":"sun-java5","source":"https://ubuntu.com/security/cve?package=sun-java5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java5","debian":"https://tracker.debian.org/pkg/sun-java5","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"end of life","component":null,"pocket":"security"}]},{"name":"sun-java6","source":"https://ubuntu.com/security/cve?package=sun-java6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java6","debian":"https://tracker.debian.org/pkg/sun-java6","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6 update 36","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]},{"id":"CVE-2012-5074","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect\nconfidentiality and integrity, related to JAX-WS.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2012verbose-1515981.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020571.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-5074"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"openjdk-7":[]},"tags":{},"packages":[{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.1.3, 2.2.3, 2.3.3","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]},{"id":"CVE-2012-5073","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0\nUpdate 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to\naffect integrity via unknown vectors related to Libraries, a different\nvulnerability than CVE-2012-5079.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"in lucid+, NetX and the plugin moved to the icedtea-web package"},{"author":"jdstrand","note":"openjdk-6b18 FTBFS on 11.04 (LP: #1043003)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2012verbose-1515981.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020571.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020556.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-5073"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"sun-java6":[],"sun-java5":[],"openjdk-6":[],"openjdk-6b18":[],"icedtea-web":[],"openjdk-7":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-6","source":"https://ubuntu.com/security/cve?package=openjdk-6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6","debian":"https://tracker.debian.org/pkg/openjdk-6","statuses":[{"release_codename":"hardy","status":"released","description":"6b27-1.12.3-0ubuntu1~08.04.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"6b24-1.11.5-0ubuntu1~10.04.2","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"6b24-1.11.5-0ubuntu1~11.04.1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"6b24-1.11.5-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"6b24-1.11.5-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"6b24-1.11.5-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-6b18","source":"https://ubuntu.com/security/cve?package=openjdk-6b18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6b18","debian":"https://tracker.debian.org/pkg/openjdk-6b18","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.1.3, 2.2.3, 2.3.3","component":null,"pocket":"security"}]},{"name":"sun-java5","source":"https://ubuntu.com/security/cve?package=sun-java5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java5","debian":"https://tracker.debian.org/pkg/sun-java5","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"end of life","component":null,"pocket":"security"}]},{"name":"sun-java6","source":"https://ubuntu.com/security/cve?package=sun-java6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java6","debian":"https://tracker.debian.org/pkg/sun-java6","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6 update 36","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]},{"id":"CVE-2012-5072","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier,\nallows remote attackers to affect confidentiality via unknown vectors\nrelated to Security.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"in lucid+, NetX and the plugin moved to the icedtea-web package"},{"author":"jdstrand","note":"openjdk-6b18 FTBFS on 11.04 (LP: #1043003)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2012verbose-1515981.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020556.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020571.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-5072"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"sun-java6":[],"sun-java5":[],"openjdk-6":[],"openjdk-6b18":[],"icedtea-web":[],"openjdk-7":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-6","source":"https://ubuntu.com/security/cve?package=openjdk-6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6","debian":"https://tracker.debian.org/pkg/openjdk-6","statuses":[{"release_codename":"hardy","status":"released","description":"6b27-1.12.3-0ubuntu1~08.04.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"6b24-1.11.5-0ubuntu1~10.04.2","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"6b24-1.11.5-0ubuntu1~11.04.1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"6b24-1.11.5-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"6b24-1.11.5-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"6b24-1.11.5-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-6b18","source":"https://ubuntu.com/security/cve?package=openjdk-6b18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6b18","debian":"https://tracker.debian.org/pkg/openjdk-6b18","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.1.3, 2.2.3, 2.3.3","component":null,"pocket":"security"}]},{"name":"sun-java5","source":"https://ubuntu.com/security/cve?package=sun-java5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java5","debian":"https://tracker.debian.org/pkg/sun-java5","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"end of life","component":null,"pocket":"security"}]},{"name":"sun-java6","source":"https://ubuntu.com/security/cve?package=sun-java6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java6","debian":"https://tracker.debian.org/pkg/sun-java6","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6 update 36","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]},{"id":"CVE-2012-5071","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0\nUpdate 36 and earlier allows remote attackers to affect confidentiality and\nintegrity, related to JMX.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"in lucid+, NetX and the plugin moved to the icedtea-web package"},{"author":"jdstrand","note":"openjdk-6b18 FTBFS on 11.04 (LP: #1043003)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2012verbose-1515981.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020571.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020556.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-5071"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"sun-java6":[],"sun-java5":[],"openjdk-6":[],"openjdk-6b18":[],"icedtea-web":[],"openjdk-7":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-6","source":"https://ubuntu.com/security/cve?package=openjdk-6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6","debian":"https://tracker.debian.org/pkg/openjdk-6","statuses":[{"release_codename":"hardy","status":"released","description":"6b27-1.12.3-0ubuntu1~08.04.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"6b24-1.11.5-0ubuntu1~10.04.2","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"6b24-1.11.5-0ubuntu1~11.04.1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"6b24-1.11.5-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"6b24-1.11.5-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"6b24-1.11.5-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-6b18","source":"https://ubuntu.com/security/cve?package=openjdk-6b18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6b18","debian":"https://tracker.debian.org/pkg/openjdk-6b18","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.1.3, 2.2.3, 2.3.3","component":null,"pocket":"security"}]},{"name":"sun-java5","source":"https://ubuntu.com/security/cve?package=sun-java5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java5","debian":"https://tracker.debian.org/pkg/sun-java5","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"end of life","component":null,"pocket":"security"}]},{"name":"sun-java6","source":"https://ubuntu.com/security/cve?package=sun-java6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java6","debian":"https://tracker.debian.org/pkg/sun-java6","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6 update 36","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]},{"id":"CVE-2012-5070","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect\nconfidentiality, related to JMX.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2012verbose-1515981.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020571.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-5070"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"openjdk-7":[]},"tags":{},"packages":[{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.1.3, 2.2.3, 2.3.3","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]},{"id":"CVE-2012-5069","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0\nUpdate 36 and earlier allows remote attackers to affect confidentiality and\nintegrity via unknown vectors related to Concurrency.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"in lucid+, NetX and the plugin moved to the icedtea-web package"},{"author":"jdstrand","note":"openjdk-6b18 FTBFS on 11.04 (LP: #1043003)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2012verbose-1515981.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020556.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020571.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-5069"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"sun-java6":[],"sun-java5":[],"openjdk-6":[],"openjdk-6b18":[],"icedtea-web":[],"openjdk-7":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-6","source":"https://ubuntu.com/security/cve?package=openjdk-6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6","debian":"https://tracker.debian.org/pkg/openjdk-6","statuses":[{"release_codename":"hardy","status":"released","description":"6b27-1.12.3-0ubuntu1~08.04.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"6b24-1.11.5-0ubuntu1~10.04.2","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"6b24-1.11.5-0ubuntu1~11.04.1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"6b24-1.11.5-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"6b24-1.11.5-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"6b24-1.11.5-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-6b18","source":"https://ubuntu.com/security/cve?package=openjdk-6b18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6b18","debian":"https://tracker.debian.org/pkg/openjdk-6b18","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.1.3, 2.2.3, 2.3.3","component":null,"pocket":"security"}]},{"name":"sun-java5","source":"https://ubuntu.com/security/cve?package=sun-java5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java5","debian":"https://tracker.debian.org/pkg/sun-java5","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"end of life","component":null,"pocket":"security"}]},{"name":"sun-java6","source":"https://ubuntu.com/security/cve?package=sun-java6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java6","debian":"https://tracker.debian.org/pkg/sun-java6","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6 update 36","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]}],"offset":68680,"limit":20,"total_results":79316}