Red Hat Security AdvisoryRHSA-2014:1036
java-1.5.0-ibm security update
Released 2014-08-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el5_10, java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el5_10.i386, java-1.5.0-ibm-accessibility-1:1.5.0.16.7-1jpp.1.el5_10 +11
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5, java-1.5.0-ibm-demo-1:1.5.0.16.7-1jpp.1.el6_5, java-1.5.0-ibm-devel-1:1.5.0.16.7-1jpp.1.el6_5 +4
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5, java-1.5.0-ibm-demo-1:1.5.0.16.7-1jpp.1.el6_5, java-1.5.0-ibm-devel-1:1.5.0.16.7-1jpp.1.el6_5 +2
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el5_10, java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el5_10.i386, java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el5_10.ppc +20
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5, java-1.5.0-ibm-demo-1:1.5.0.16.7-1jpp.1.el6_5, java-1.5.0-ibm-devel-1:1.5.0.16.7-1jpp.1.el6_5 +7
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5, java-1.5.0-ibm-demo-1:1.5.0.16.7-1jpp.1.el6_5, java-1.5.0-ibm-devel-1:1.5.0.16.7-1jpp.1.el6_5 +4
Fixes 9 records
Priority MEDIUM 49
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05577 · Published 2014-07-17 · Fixed
Priority MEDIUM 49
Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05577 · Published 2014-07-17 · Fixed
Priority MEDIUM 41
Unspecified vulnerability in the IBM Java Virtual Machine, as used in IBM WebSphere Real Time 3 before Service Refresh 7 FP1 and other products, allows remote attackers to gain privileges by leveraging the ability to exe…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05053 · Published 2014-08-12 · Partial fix
Priority LOW 35
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality and integrity via vectors related to JMX.
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.03826 · Published 2014-07-17 · Fixed
Priority LOW 31
IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6 R1 before SR8 FP1 (6.1.8.1), 6 before SR16 FP1 (6.0.16.1), and before 5.0 SR16 FP7 (5.0.16.7) allows attackers to obtain the…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.01153 · Published 2014-12-02 · Fixed CWE-255
Priority LOW 30
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Security.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04086 · Published 2014-07-17 · Fixed
Priority LOW 29
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Libraries.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03826 · Published 2014-07-17 · Fixed
Priority LOW 25
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to "Diffie-Hellman key…
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.03501 · Published 2014-07-17 · Fixed
Priority LOW 25
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and JRockit R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security.
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.03501 · Published 2014-07-17 · Fixed
THREATIST.IORead the docs