Red Hat Security Advisory

RHSA-2012:0034

java-1.6.0-ibm security update

Released 2012-01-18 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Desktop version 4 Extras java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4, java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4.i386, java-1.6.0-ibm-demo-1:1.6.0.10.0-1jpp.2.el4 +11
Red Hat Enterprise Linux AS version 4 Extras java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4, java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4.i386, java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4.ppc +18
Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el5, java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el5.i386, java-1.6.0-ibm-accessibility-1:1.6.0.10.0-1jpp.2.el5 +13
Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6, java-1.6.0-ibm-demo-1:1.6.0.10.0-1jpp.2.el6, java-1.6.0-ibm-devel-1:1.6.0.10.0-1jpp.2.el6 +4
Red Hat Enterprise Linux ES version 4 Extras java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4, java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4.i386, java-1.6.0-ibm-demo-1:1.6.0.10.0-1jpp.2.el4 +11
Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6, java-1.6.0-ibm-demo-1:1.6.0.10.0-1jpp.2.el6, java-1.6.0-ibm-devel-1:1.6.0.10.0-1jpp.2.el6 +2
Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el5, java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el5.i386, java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el5.ppc +21
Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6, java-1.6.0-ibm-demo-1:1.6.0.10.0-1jpp.2.el6, java-1.6.0-ibm-devel-1:1.6.0.10.0-1jpp.2.el6 +5
Red Hat Enterprise Linux WS version 4 Extras java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4, java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el4.i386, java-1.6.0-ibm-demo-1:1.6.0.10.0-1jpp.2.el4 +11
Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.10.0-1jpp.2.el6, java-1.6.0-ibm-demo-1:1.6.0.10.0-1jpp.2.el6, java-1.6.0-ibm-devel-1:1.6.0.10.0-1jpp.2.el6 +4

Fixes 18 records

TI-2011-03122 CVE-2011-3544 · GHSA-25jq-3vh4-pgv4

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

CRITICAL 100KEV

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect con…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.96653 Published 2011-10-19 Partial fix CWE-284

TI-2011-03134 CVE-2011-3556 · GHSA-x97f-rpv2-wwmc

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

HIGH 72

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.76405 Published 2011-10-19 Partial fix

TI-2011-02999 CVE-2011-3389 · GHSA-rhch-pcq2-7gp3

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft…

MEDIUM 58

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initializa…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.73327 Published 2011-09-06 Partial fix CWE-326

TI-2011-03123 CVE-2011-3545 · GHSA-66qr-xfmw-w5h7

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

MEDIUM 51

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier, allows remo…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05445 Published 2011-10-19 Partial fix

TI-2011-03132 CVE-2011-3554 · GHSA-vx55-8v47-79g6

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

MEDIUM 49

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and untrusted Ja…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03304 Published 2011-10-19 Fixed

TI-2011-03127 CVE-2011-3549 · GHSA-h362-59hf-w6m2

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

MEDIUM 49

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applic…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03188 Published 2011-10-19 Partial fix

TI-2011-03126 CVE-2011-3548 · GHSA-3frf-3pj9-pfc5

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

MEDIUM 49

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start app…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03277 Published 2011-10-19 Partial fix

TI-2011-03100 CVE-2011-3521 · GHSA-w2wm-rj3g-vgpf

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

MEDIUM 49

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, 7, 6 Update 27 and earlier, and 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and untrust…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.039 Published 2011-10-19 Fixed

TI-2011-03129 CVE-2011-3551 · GHSA-hf9g-qf2v-h32m

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

MEDIUM 47

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity,…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04549 Published 2011-10-19 Fixed

TI-2011-03128 CVE-2011-3550 · GHSA-6cw3-gfh7-8mvv

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

LOW 38

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confid…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.02607 Published 2011-10-19 Fixed

TI-2011-03095 CVE-2011-3516 · GHSA-hfw5-8fr6-p453

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

LOW 38

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, when running on Windows, allows remote untrusted Java Web Start applications and untrusted Java a…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.0268 Published 2011-10-19 Fixed

TI-2011-03135 CVE-2011-3557 · GHSA-7fq2-gpx6-fhfw

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

LOW 36

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03477 Published 2011-10-19 Partial fix

TI-2011-03138 CVE-2011-3560 · GHSA-4g33-3743-jf7f

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

LOW 33

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02605 Published 2011-10-19 Partial fix

TI-2011-03124 CVE-2011-3546 · GHSA-vvg7-rhrh-9qp9

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

LOW 30

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JavaFX 2.0 allows remote untrusted Java Web Start applications and untrusted Java applets…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.02227 Published 2011-10-19 Fixed

TI-2011-03125 CVE-2011-3547 · GHSA-vhwg-xmr6-4mmj

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

LOW 28

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02685 Published 2011-10-19 Partial fix

TI-2011-03131 CVE-2011-3553 · GHSA-pch5-2rr3-9w92

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

LOW 21

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote authenticated users to affect confidentiality, r…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02205 Published 2011-10-19 Fixed

TI-2011-03130 CVE-2011-3552 · GHSA-fhmq-h5fp-gqjw

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

LOW 19

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02905 Published 2011-10-19 Partial fix

TI-2011-03139 CVE-2011-3561 · GHSA-376x-7h8v-qf9q

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

LOW 13

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JavaFX 2.0 allows remote attackers to affect confidentiality via unknown vectors related t…

CVSS 2.0LOW 1.8 Adjacent network No auth Interaction — EPSS 0.01379 Published 2011-10-19 Fixed