Red Hat Security Advisory

RHSA-2012:0508

java-1.5.0-ibm security update

Released 2012-04-23 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5, java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5.i386, java-1.5.0-ibm-accessibility-1:1.5.0.13.1-1jpp.1.el5 +11
Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-demo-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-devel-1:1.5.0.13.1-1jpp.2.el6_2 +4
Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-demo-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-devel-1:1.5.0.13.1-1jpp.2.el6_2 +2
Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5, java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5.i386, java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5.ppc +20
Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-demo-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-devel-1:1.5.0.13.1-1jpp.2.el6_2 +7
Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-demo-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-devel-1:1.5.0.13.1-1jpp.2.el6_2 +4

Fixes 12 records

TI-2012-00455 CVE-2012-0507 · GHSA-43xj-964v-hcjf

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

CRITICAL 100KEV

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98189 Published 2012-06-07 Partial fix CWE-843

TI-2011-02999 CVE-2011-3389 · GHSA-rhch-pcq2-7gp3

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft…

MEDIUM 58

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initializa…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.73327 Published 2011-09-06 Partial fix CWE-326

TI-2012-00447 CVE-2012-0499 · GHSA-w5h4-pg4w-wqvr

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 52

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier; and JavaFX 2.0.2 and earli…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06159 Published 2012-02-15 Partial fix

TI-2012-00446 CVE-2012-0498 · GHSA-vjgx-6cj7-qwh6

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 52

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05751 Published 2012-02-15 Partial fix

TI-2012-00453 CVE-2012-0505 · GHSA-265h-j3mg-7rf9

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 38

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02627 Published 2012-02-15 Partial fix

TI-2012-00451 CVE-2012-0503 · GHSA-9g8w-c3c6-8wxm

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 38

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02786 Published 2012-02-15 Partial fix

TI-2011-03135 CVE-2011-3557 · GHSA-7fq2-gpx6-fhfw

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

LOW 36

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03477 Published 2011-10-19 Partial fix

TI-2011-03141 CVE-2011-3563 · GHSA-mwf7-vx5q-mx9x

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 35

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03697 Published 2012-02-15 Partial fix

TI-2012-00450 CVE-2012-0502 · GHSA-m25x-m489-rqr9

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 34

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02806 Published 2012-02-15 Partial fix

TI-2011-03138 CVE-2011-3560 · GHSA-4g33-3743-jf7f

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

LOW 33

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start app…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02605 Published 2011-10-19 Partial fix

TI-2012-00449 CVE-2012-0501 · GHSA-8366-7q28-v2hw

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 29

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03487 Published 2012-02-15 Partial fix

TI-2012-00454 CVE-2012-0506 · GHSA-9c5v-r999-w34j

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 24

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02065 Published 2012-02-15 Partial fix