Red Hat Security Advisory

RHSA-2010:0807

java-1.5.0-ibm security update

Released 2010-10-27 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Desktop version 4 Extras java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4, java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4.i386, java-1.5.0-ibm-demo-1:1.5.0.12.2-1jpp.1.el4 +9
Red Hat Enterprise Linux AS version 4 Extras java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4, java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4.i386, java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4.ppc +17
Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5, java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5.i386, java-1.5.0-ibm-accessibility-1:1.5.0.12.2-1jpp.1.el5 +11
Red Hat Enterprise Linux ES version 4 Extras java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4, java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4.i386, java-1.5.0-ibm-demo-1:1.5.0.12.2-1jpp.1.el4 +9
Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5, java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5.i386, java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el5.ppc +20
Red Hat Enterprise Linux WS version 4 Extras java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4, java-1.5.0-ibm-1:1.5.0.12.2-1jpp.1.el4.i386, java-1.5.0-ibm-demo-1:1.5.0.12.2-1jpp.1.el4 +9

Fixes 17 records

TI-2009-03392 CVE-2009-3555 · GHSA-f7w7-6pjc-wwm6

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft…

CRITICAL 91

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.87264 Published 2009-11-09 Fixed in 7.0.10, 6.0.32 +1 CWE-300

TI-2010-03388 CVE-2010-3559 · GHSA-vj8f-hqf8-qh5x

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business…

MEDIUM 55

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability v…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.09711 Published 2010-10-19 Fixed

TI-2010-03398 CVE-2010-3569 · GHSA-gxmw-9pmp-92hq

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and avail…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07099 Published 2010-10-19 Fixed

TI-2010-03391 CVE-2010-3562 · GHSA-7242-cf77-68qm

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6…

MEDIUM 53

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07099 Published 2010-10-19 Fixed

TI-2010-03395 CVE-2010-3566 · GHSA-95wc-36p6-5x3p

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6…

MEDIUM 52

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update and 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05885 Published 2010-10-19 Fixed

TI-2010-03403 CVE-2010-3574 · GHSA-6gvj-cjgc-qxmv

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

MEDIUM 51

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availabil…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.049 Published 2010-10-19 Fixed

TI-2010-03401 CVE-2010-3572 · GHSA-58vp-fj3h-8rjv

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business…

MEDIUM 51

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05193 Published 2010-10-19 Fixed

TI-2010-03397 CVE-2010-3568 · GHSA-jmxm-vpv4-jjr2

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and…

MEDIUM 51

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.049 Published 2010-10-19 Fixed

TI-2010-03394 CVE-2010-3565 · GHSA-h9j4-m2pf-hmrh

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6…

MEDIUM 51

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown ve…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05616 Published 2010-10-19 Fixed

TI-2010-03385 CVE-2010-3556 · GHSA-65g6-r5w2-5m6f

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6…

MEDIUM 51

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05193 Published 2010-10-19 Fixed

TI-2010-03379 CVE-2010-3550 · GHSA-m6fr-478g-xrmj

Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for…

MEDIUM 47

Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown v…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04427 Published 2010-10-19 Fixed

TI-2010-01276 CVE-2010-1321 · GHSA-pcm6-6x97-2mrc

The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT…

MEDIUM 40

The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for inva…

CVSS 2.0MEDIUM 6.8 Network Low privileges Interaction — EPSS 0.06884 Published 2010-05-19 Fixed CWE-476

TI-2010-03402 CVE-2010-3573 · GHSA-hv45-8vp2-m2c8

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

LOW 36

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vecto…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.10557 Published 2010-10-19 Fixed

TI-2010-03378 CVE-2010-3549 · GHSA-jf8h-wqmh-2m6x

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

LOW 36

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03337 Published 2010-10-19 Fixed

TI-2010-03371 CVE-2010-3541 · GHSA-wp5h-xwhh-9fw3

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

LOW 29

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.03102 Published 2010-10-19 Fixed

TI-2010-03380 CVE-2010-3551 · GHSA-m34f-4vjh-jxj4

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

LOW 28

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02999 Published 2010-10-19 Fixed

TI-2010-03377 CVE-2010-3548 · GHSA-mp8j-7g6r-hj45

Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in…

LOW 28

Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02999 Published 2010-10-19 Fixed