Red Hat Security Advisory

RHSA-2009:0015

java-1.6.0-ibm security update

Released 2009-01-13 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Desktop version 4 Extras java-1.6.0-ibm-1:1.6.0.3-1jpp.3.el4, java-1.6.0-ibm-1:1.6.0.3-1jpp.3.el4.i386, java-1.6.0-ibm-demo-1:1.6.0.3-1jpp.3.el4 +10
Red Hat Enterprise Linux AS version 4 Extras java-1.6.0-ibm-1:1.6.0.3-1jpp.3.el4, java-1.6.0-ibm-1:1.6.0.3-1jpp.3.el4.i386, java-1.6.0-ibm-1:1.6.0.3-1jpp.3.el4.ppc +17
Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.3-1jpp.1.el5, java-1.6.0-ibm-1:1.6.0.3-1jpp.1.el5.i386, java-1.6.0-ibm-accessibility-1:1.6.0.3-1jpp.1.el5 +12
Red Hat Enterprise Linux ES version 4 Extras java-1.6.0-ibm-1:1.6.0.3-1jpp.3.el4, java-1.6.0-ibm-1:1.6.0.3-1jpp.3.el4.i386, java-1.6.0-ibm-demo-1:1.6.0.3-1jpp.3.el4 +10
Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.3-1jpp.1.el5, java-1.6.0-ibm-1:1.6.0.3-1jpp.1.el5.i386, java-1.6.0-ibm-1:1.6.0.3-1jpp.1.el5.ppc +20
Red Hat Enterprise Linux WS version 4 Extras java-1.6.0-ibm-1:1.6.0.3-1jpp.3.el4, java-1.6.0-ibm-1:1.6.0.3-1jpp.3.el4.i386, java-1.6.0-ibm-demo-1:1.6.0.3-1jpp.3.el4 +10

Fixes 12 records

TI-2008-05098 CVE-2008-5353 · GHSA-3fx3-qcjv-qr6h

The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and…

CRITICAL 85

The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during des…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.86081 Published 2008-12-05 Fixed

TI-2008-05104 CVE-2008-5359 · GHSA-cq8v-6hvc-rjqq

Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and…

MEDIUM 53

Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow rem…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.10784 Published 2008-12-05 Fixed CWE-119

TI-2008-02006 CVE-2008-2086 · GHSA-cmpj-5w72-jq28

Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE…

MEDIUM 50

Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allow remote attackers to execute arbitrary code via a crafted jnlp…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.07319 Published 2008-12-05 Fixed CWE-94

TI-2008-05099 CVE-2008-5354 · GHSA-2q9v-v58g-5c4c

Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6…

MEDIUM 48

Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04798 Published 2008-12-05 Fixed CWE-119

TI-2008-05097 CVE-2008-5352 · GHSA-pfr6-j3gf-9m85

Integer overflow in the JAR unpacking utility (unpack200) in the unpack library…

MEDIUM 46

Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allow…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0306 Published 2008-12-05 Fixed CWE-189

TI-2008-05090 CVE-2008-5345 · GHSA-6hm4-p2vh-7vmv

Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update…

MEDIUM 40

Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allo…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04122 Published 2008-12-05 Fixed

TI-2008-05092 CVE-2008-5347 · GHSA-982w-2wqp-q964

Multiple unspecified vulnerabilities in Java Runtime Environment (JRE) for Sun JDK and…

LOW 39

Multiple unspecified vulnerabilities in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier allow untrusted applets and applications to gain privileges via vectors related to access to inner classe…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03426 Published 2008-12-05 Fixed CWE-264

TI-2008-05089 CVE-2008-5344 · GHSA-qjhj-jg8g-7m6h

Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6…

LOW 39

Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to rea…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03426 Published 2008-12-05 Fixed

TI-2008-05093 CVE-2008-5348 · GHSA-gcr4-crvj-h3h7

Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update…

LOW 38

Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, al…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.04306 Published 2008-12-05 Fixed

TI-2008-05105 CVE-2008-5360 · GHSA-grv8-692r-c98h

Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE…

LOW 35

Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predi…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03478 Published 2008-12-05 Fixed

TI-2008-05084 CVE-2008-5339 · GHSA-rxf7-p2jr-3vf7

Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6…

LOW 29

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03451 Published 2008-12-05 Fixed

TI-2008-05095 CVE-2008-5350 · GHSA-6w6p-jv9f-c5p2

Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update…

LOW 28

Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applications and apple…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03013 Published 2008-12-05 Fixed CWE-200