CVE-2007-3716
Fixed in a distro release EPSS 4%
The Java XML Digital Signature implementation in Sun JDK and JRE 6 before Update 2 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to CVE-2007-3715.
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | openjdk-11-openj9 | 0.59.0-r2 |
| Chainguard | openjdk-11-openj9-dbg | 0.59.0-r2 |
| Chainguard | openjdk-11-openj9-default-jdk | 0.59.0-r2 |
| Chainguard | openjdk-11-openj9-default-jvm | 0.59.0-r2 |
| Chainguard | openjdk-11-openj9-doc | 0.59.0-r2 |
| Chainguard | openjdk-11-openj9-jmods | 0.59.0-r2 |
| Chainguard | openjdk-11-openj9-jre | 0.59.0-r2 |
| Chainguard | openjdk-17-openj9 | 0.59.0-r1 |
| Chainguard | openjdk-17-openj9-dbg | 0.59.0-r1 |
| Chainguard | openjdk-17-openj9-default-jdk | 0.59.0-r1 |
| Chainguard | openjdk-17-openj9-default-jvm | 0.59.0-r1 |
| Chainguard | openjdk-17-openj9-doc | 0.59.0-r1 |
| Chainguard | openjdk-17-openj9-jmods | 0.59.0-r1 |
| Chainguard | openjdk-17-openj9-jre | 0.59.0-r1 |
| Chainguard | openjdk-21-openj9 | 0.59.0-r1 |
| Chainguard | openjdk-21-openj9-dbg | 0.59.0-r1 |
| Chainguard | openjdk-21-openj9-default-jdk | 0.59.0-r1 |
| Chainguard | openjdk-21-openj9-default-jvm | 0.59.0-r1 |
| Chainguard | openjdk-21-openj9-doc | 0.59.0-r1 |
| Chainguard | openjdk-21-openj9-jmods | 0.59.0-r1 |
| Chainguard | openjdk-21-openj9-jre | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9 | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-dbg | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-default-jdk | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-default-jvm | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-jmods | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-jre | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9 | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-dbg | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-default-jdk | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-default-jvm | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-jmods | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-jre | 0.59.0-r1 |
| Chainguard | openjdk-8-openj9 | 0.59.0-r1 |
| Chainguard | openjdk-8-openj9-dbg | 0.59.0-r1 |
| Chainguard | openjdk-8-openj9-default-jdk | 0.59.0-r1 |
| Chainguard | openjdk-8-openj9-default-jvm | 0.59.0-r1 |
| Chainguard | openjdk-8-openj9-doc | 0.59.0-r1 |
| Chainguard | openjdk-8-openj9-jre | 0.59.0-r1 |