{
  "cves": [
    "CVE-2012-1682",
    "CVE-2012-0547"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "CRITICAL"
  },
  "description": "[1:1.6.0.0-1.49.1.11.4]\n- Updated to latest IedTea6 1.11.4\n- Resolves: rhbz#853345\n\n[1:1.6.0.0-1.48.1.11.3]\n- Access gnome bridge jar is forced to have 644 permissions\n- Resolves: rhbz#828752\n\n[1:1.6.0.0-1.47.1.11.3]\n- Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:\n  - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.\n  - packages added also to package.definition\n- Resolves: rhbz#828752\n\n[1:1.6.0.0-1.46.1.11.3]\n- Updated to IcedTea6 1.11.3\n- Removed upstreamed patch8 - java-1.6.0-openjdk-jirafix_2820_2821.patch\n- Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:\n  - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.\n  - packages added to patch\n- Resolves: rhbz#828752",
  "id": "ELSA-2012-1221",
  "ovalId": "oval:com.oracle.elsa:def:20121221",
  "source": "oracle_linux",
  "title": "ELSA-2012-1221:  java-1.6.0-openjdk security update (CRITICAL)",
  "url": "https://linux.oracle.com/errata/ELSA-2012-1221.html"
}