Red Hat Security Advisory

RHSA-2014:0509

java-1.5.0-ibm security update

Released 2014-05-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el5_10, java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el5_10.i386, java-1.5.0-ibm-accessibility-1:1.5.0.16.6-1jpp.1.el5_10 +11
Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5, java-1.5.0-ibm-demo-1:1.5.0.16.6-1jpp.1.el6_5, java-1.5.0-ibm-devel-1:1.5.0.16.6-1jpp.1.el6_5 +4
Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5, java-1.5.0-ibm-demo-1:1.5.0.16.6-1jpp.1.el6_5, java-1.5.0-ibm-devel-1:1.5.0.16.6-1jpp.1.el6_5 +2
Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el5_10, java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el5_10.i386, java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el5_10.ppc +20
Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5, java-1.5.0-ibm-demo-1:1.5.0.16.6-1jpp.1.el6_5, java-1.5.0-ibm-devel-1:1.5.0.16.6-1jpp.1.el6_5 +7
Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5, java-1.5.0-ibm-demo-1:1.5.0.16.6-1jpp.1.el6_5, java-1.5.0-ibm-devel-1:1.5.0.16.6-1jpp.1.el6_5 +4

Fixes 14 records

TI-2014-00408 CVE-2014-0429 · GHSA-6966-vmh9-2rgg

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1…

MEDIUM 53

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07418 Published 2014-04-15 Fixed

TI-2014-01931 CVE-2014-2421 · GHSA-xpc4-vv94-q5pm

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related t…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06765 Published 2014-04-16 Fixed

TI-2014-00436 CVE-2014-0457 · GHSA-ph3v-m9mc-6c3f

Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06765 Published 2014-04-16 Fixed

TI-2014-01937 CVE-2014-2427 · GHSA-2h4c-7xh4-m37v

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE…

MEDIUM 41

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05072 Published 2014-04-16 Fixed

TI-2014-01922 CVE-2014-2412 · GHSA-wf6j-4458-f5r7

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE…

MEDIUM 41

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05072 Published 2014-04-16 Fixed

TI-2014-00430 CVE-2014-0451 · GHSA-3fv5-2j3p-9qmm

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE…

MEDIUM 41

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05072 Published 2014-04-16 Fixed

TI-2014-00425 CVE-2014-0446 · GHSA-89j3-8w2j-whq3

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE…

MEDIUM 41

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05072 Published 2014-04-15 Fixed

TI-2013-05458 CVE-2013-6629 · GHSA-7vr8-hqr3-rjrw

The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0…

LOW 35

The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of componen…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0973 Published 2013-11-15 Fixed CWE-200

TI-2014-00439 CVE-2014-0460 · GHSA-5fhm-4w6c-fp4v

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1…

LOW 33

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.04334 Published 2014-04-16 Fixed

TI-2014-00810 CVE-2014-0878 · GHSA-v5qx-wfhq-jh75

The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers…

LOW 30

The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.02093 Published 2014-05-26 Fixed CWE-310

TI-2014-01911 CVE-2014-2401 · GHSA-c277-m7f2-cgrx

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and…

LOW 29

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03611 Published 2014-04-16 Fixed

TI-2014-00432 CVE-2014-0453 · GHSA-356h-vwf2-6hvf

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1…

LOW 27

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.04993 Published 2014-04-16 Fixed

TI-2014-01908 CVE-2014-2398 · GHSA-m5wr-fv5w-98p4

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and…

LOW 22

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02566 Published 2014-04-16 Fixed

TI-2014-01461 CVE-2014-1876 · GHSA-97jm-5rh5-84f8

The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8…

LOW 21

The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary…

CVSS 2.0MEDIUM 4.4 Local No auth Interaction — EPSS 0.00456 Published 2014-02-10 Partial fix CWE-59