Red Hat Security AdvisoryRHSA-2014:1881
java-1.5.0-ibm security update
Released 2014-11-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el5, java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el5.i386, java-1.5.0-ibm-accessibility-1:1.5.0.16.8-1jpp.1.el5 +11
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6, java-1.5.0-ibm-demo-1:1.5.0.16.8-1jpp.1.el6_6, java-1.5.0-ibm-devel-1:1.5.0.16.8-1jpp.1.el6_6 +4
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6, java-1.5.0-ibm-demo-1:1.5.0.16.8-1jpp.1.el6_6, java-1.5.0-ibm-devel-1:1.5.0.16.8-1jpp.1.el6_6 +4
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el5, java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el5.i386, java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el5.ppc +20
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6, java-1.5.0-ibm-demo-1:1.5.0.16.8-1jpp.1.el6_6, java-1.5.0-ibm-devel-1:1.5.0.16.8-1jpp.1.el6_6 +7
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.8-1jpp.1.el6_6, java-1.5.0-ibm-demo-1:1.5.0.16.8-1jpp.1.el6_6, java-1.5.0-ibm-devel-1:1.5.0.16.8-1jpp.1.el6_6 +4
Fixes 9 records
Priority MEDIUM 62
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a…
CVSS 3.1LOW 3.4· Network · No auth · User interaction · EPSS 0.99999 · Published 2014-10-15 · Partial fix CWE-329
Priority LOW 36
Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03317 · Published 2014-10-15 · Fixed
Priority LOW 31
Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1 before SR8 FP2 (6.1.8.2), 6 before SR16 FP2 (6.0.16.2), and before SR16 FP8 (5.0.16.8) allows local…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00559 · Published 2014-12-02 · Fixed CWE-94
Priority LOW 30
Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04053 · Published 2014-10-15 · Partial fix
Priority LOW 26
Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality via unknown vectors related to Libraries.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03041 · Published 2014-10-15 · Fixed
Priority LOW 26
Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Libraries.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03041 · Published 2014-10-15 · Fixed
Priority LOW 25
Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows remote attackers to affect confidentiality and integrity via vectors related to JSS…
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.03517 · Published 2014-10-15 · Fixed
Priority LOW 19
Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and JRockit R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Security…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.03137 · Published 2014-10-15 · Fixed
Priority LOW 19
Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect integrity via unknown vectors related to Libraries.
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.03089 · Published 2014-10-15 · Fixed
THREATIST.IORead the docs