Bug 452652 - OpenJDK unauthorized access to certain URL resources (6607339)
Summary: OpenJDK unauthorized access to certain URL resources (6607339)
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2008-06-24 10:18 UTC by Marc Schoenefeld
Modified: 2019-09-29 12:25 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2010-03-22 15:40:14 UTC
Embargoed:

Attachments (Terms of Use)

Description Marc Schoenefeld 2008-06-24 10:18:10 UTC 
From Sun pre-notification, 6/23/2008

2. 6607339
A vulnerability in the Java Runtime Environment with processing XML data may 
allow an untrusted applet or application that is downloaded from a website 
unauthorized access to certain URL resources (such as some files and web pages).
Comment 1 Marc Schoenefeld 2008-06-24 10:18:10 UTC 
Created attachment 310126 [details]
Test and patch from Sun partner site
Comment 2 Fedora Update System 2008-07-09 19:17:16 UTC 
java-1.6.0-openjdk-1.6.0.0-0.16.b09.fc9 has been submitted as an update for Fedora 9
Comment 3 Fedora Update System 2008-07-09 21:46:49 UTC 
java-1.7.0-icedtea-1.7.0.0-0.20.b21.snapshot.fc8 has been pushed to the Fedora 8 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 4 Fedora Update System 2008-07-15 12:13:26 UTC 
java-1.6.0-openjdk-1.6.0.0-0.16.b09.fc9 has been pushed to the Fedora 9 stable repository.  If problems still persist, please make note of it in this bug report.
Note You need to log in before you can comment on or make changes to this bug.