Red Hat Security AdvisoryRHSA-2012:0006
java-1.4.2-ibm security update
Released 2012-01-09 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 4 Extras java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el4, java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el4.i386, java-1.4.2-ibm-demo-1.4.2.13.11-1jpp.1.el4 +9
- Red Hat Enterprise Linux AS version 4 Extras java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el4, java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el4.i386, java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el4.ia64 +20
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el5, java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el5.i386, java-1.4.2-ibm-demo-1.4.2.13.11-1jpp.1.el5 +9
- Red Hat Enterprise Linux ES version 4 Extras java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el4, java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el4.i386, java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el4.ia64 +13
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el5, java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el5.i386, java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el5.ia64 +20
- Red Hat Enterprise Linux WS version 4 Extras java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el4, java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el4.i386, java-1.4.2-ibm-1.4.2.13.11-1jpp.1.el4.ia64 +13
Fixes 9 records
Priority HIGH 72
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.76405 · Published 2011-10-19 · Partial fix
Priority MEDIUM 58
The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initializa…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.73327 · Published 2011-09-06 · Partial fix CWE-326
Priority MEDIUM 51
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier, allows remo…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05445 · Published 2011-10-19 · Partial fix
Priority MEDIUM 49
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applic…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03188 · Published 2011-10-19 · Partial fix
Priority MEDIUM 49
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start app…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03277 · Published 2011-10-19 · Partial fix
Priority LOW 36
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03477 · Published 2011-10-19 · Partial fix
Priority LOW 33
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start app…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.02605 · Published 2011-10-19 · Partial fix
Priority LOW 28
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start app…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02685 · Published 2011-10-19 · Partial fix
Priority LOW 19
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote attackers to affect integrit…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.02905 · Published 2011-10-19 · Partial fix
THREATIST.IORead the docs