Red Hat Security Advisory: java-1.6.0-bea security update

The java-1.6.0-bea packages, which include the BEA WebLogic JRockit JRE and SDK certified for Java 2 Platform Standard Edition v1.6.0, contain multiple important security vulnerabilities. These include flaws in the Java Management Extensions (JMX) management agent allowing illegal remote operations, issues with handling unsigned applets enabling remote attackers to connect to host services, vulnerabilities in the Java API for XML Web Services (JAX-WS) that could lead to URL access or denial of service, and scripting support flaws that could grant untrusted applets extended privileges such as file and program access. These vulnerabilities are specifically triggered by the "appletviewer" application in java-1.6.0-bea. Due to these security issues, Red Hat has removed the java-1.6.0-bea packages and recommends users obtain updates directly from Oracle or use alternative Java implementations.

• access.redhat.com/errata/RHSA-2008:1045 (opens in a new tab)
• access.redhat.com/security/updates/classification/ (opens in a new tab)
• support.bea.com/application_content/product_portlets/securityadvisories/jrockitindex.html (opens in a new tab)
• bugzilla.redhat.com/show_bug.cgi?id=452649 (opens in a new tab)
• bugzilla.redhat.com/show_bug.cgi?id=452659 (opens in a new tab)
• bugzilla.redhat.com/show_bug.cgi?id=454601 (opens in a new tab)
• bugzilla.redhat.com/show_bug.cgi?id=454603 (opens in a new tab)
• security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_1045.json (opens in a new tab)

• Red Hat Security Advisory: Satellite 6.19.6 Async UpdateCriticalVulnerability2026-11-13
• Red Hat Security Advisory: vdsm security updateHighVulnerability2018-01-05
• Red Hat Security Advisory: ovirt-guest-agent-docker security and bug fix updateHighVulnerability2018-01-05
• Red Hat Security Advisory: vdsm security updateHighVulnerability2018-01-05
• Red Hat Security Advisory: redhat-virtualization-host security updateHighVulnerability2018-01-05