IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security alerts page, listed in the References section. (CVE-2014-0457, CVE-2014-2421, CVE-2014-0429, CVE-2014-0461, CVE-2014-2428, CVE-2014-0446, CVE-2014-0452, CVE-2014-0451, CVE-2014-2423, CVE-2014-2427, CVE-2014-0458, CVE-2014-2414, CVE-2014-2412, CVE-2014-2409, CVE-2014-0460, CVE-2013-6954, CVE-2013-6629, CVE-2014-2401, CVE-2014-0449, CVE-2014-0453, CVE-2014-2398, CVE-2014-1876, CVE-2014-2420) All users of java-1.6.0-ibm are advised to upgrade to these updated packages, containing the IBM Java SE 6 SR16 release. All running instances of IBM Java must be restarted for the update to take effect.
bugs.debian.org/cgi-bin/bugreport.cgi?bug=737562
marc.info/?l=bugtraq&m=140852886808946&w=2
marc.info/?l=bugtraq&m=140852974709252&w=2
osvdb.org/102808
rhn.redhat.com/errata/RHSA-2014-0675.html
rhn.redhat.com/errata/RHSA-2014-0685.html
seclists.org/oss-sec/2014/q1/242
seclists.org/oss-sec/2014/q1/285
secunia.com/advisories/58415
secunia.com/advisories/59058
security.gentoo.org/glsa/glsa-201406-32.xml
www-01.ibm.com/support/docview.wss?uid=swg21672080
www-01.ibm.com/support/docview.wss?uid=swg21676746
www-01.ibm.com/support/docview.wss?uid=swg21679713
www.debian.org/security/2014/dsa-2912
www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
www.securityfocus.com/bid/65568
www.ubuntu.com/usn/USN-2187-1
www.ubuntu.com/usn/USN-2191-1
access.redhat.com/errata/RHSA-2014:0413
access.redhat.com/errata/RHSA-2014:0414
access.redhat.com/security/cve/CVE-2014-0878
access.redhat.com/security/updates/classification/#critical
bugzilla.redhat.com/show_bug.cgi?id=1060907
rhn.redhat.com/errata/RHSA-2014-0508.html
www.ibm.com/developerworks/java/jdk/alerts/