Red Hat Security Advisory

RHSA-2015:0133

java-1.7.1-ibm security update

Released 2015-02-05 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0, java-1.7.1-ibm-demo-1:1.7.1.2.10-1jpp.3.el7_0, java-1.7.1-ibm-devel-1:1.7.1.2.10-1jpp.3.el7_0 +3
Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0, java-1.7.1-ibm-demo-1:1.7.1.2.10-1jpp.3.el7_0, java-1.7.1-ibm-devel-1:1.7.1.2.10-1jpp.3.el7_0 +1
Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6, java-1.7.1-ibm-demo-1:1.7.1.2.10-1jpp.3.el6_6, java-1.7.1-ibm-devel-1:1.7.1.2.10-1jpp.3.el6_6 +3
Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6, java-1.7.1-ibm-demo-1:1.7.1.2.10-1jpp.3.el6_6, java-1.7.1-ibm-devel-1:1.7.1.2.10-1jpp.3.el6_6 +1
Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6, java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6.ppc, java-1.7.1-ibm-demo-1:1.7.1.2.10-1jpp.3.el6_6 +6
Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0, java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0.ppc, java-1.7.1-ibm-demo-1:1.7.1.2.10-1jpp.3.el7_0 +6
Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6, java-1.7.1-ibm-demo-1:1.7.1.2.10-1jpp.3.el6_6, java-1.7.1-ibm-devel-1:1.7.1.2.10-1jpp.3.el6_6 +3
Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0, java-1.7.1-ibm-demo-1:1.7.1.2.10-1jpp.3.el7_0, java-1.7.1-ibm-devel-1:1.7.1.2.10-1jpp.3.el7_0 +3

Fixes 13 records

TI-2014-05443 CVE-2014-6593 · GHSA-fpfc-8gg5-hw57

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE…

MEDIUM 55

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related t…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.66374 Published 2015-01-21 Fixed

TI-2015-00372 CVE-2015-0408 · GHSA-p95j-84hm-vv9m

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote…

MEDIUM 53

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06877 Published 2015-01-21 Fixed

TI-2014-07260 CVE-2014-8891 · GHSA-cgw9-qmr5-66r3

Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology…

MEDIUM 53

Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attacke…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07244 Published 2015-03-06 Fixed

TI-2014-05399 CVE-2014-6549 · GHSA-x6cv-xr7v-j9fw

Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect…

MEDIUM 50

Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04577 Published 2015-01-21 Fixed

TI-2014-07261 CVE-2014-8892 · GHSA-qjg4-m6c6-gq85

Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology…

MEDIUM 41

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.04453 Published 2015-03-06 Fixed

TI-2015-00376 CVE-2015-0412 · GHSA-5rmc-hxjg-x3qp

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers…

LOW 35

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.01459 Published 2015-01-21 Fixed

TI-2015-00370 CVE-2015-0406 · GHSA-9vj8-hjc2-m5vp

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers…

LOW 33

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality and availability via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.03899 Published 2015-01-21 Fixed

TI-2015-00374 CVE-2015-0410 · GHSA-52j6-f8wf-g688

Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle…

LOW 31

Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affe…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05032 Published 2015-01-21 Fixed

TI-2015-00367 CVE-2015-0403 · GHSA-gvqf-ccjr-pp89

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to…

LOW 31

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00437 Published 2015-01-21 Fixed

TI-2015-00371 CVE-2015-0407 · GHSA-gr6w-54mw-4jfq

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote…

LOW 30

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Swing.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04351 Published 2015-01-21 Fixed

TI-2014-05441 CVE-2014-6591 · GHSA-7hw8-8c2x-83rg

Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72…

LOW 20

Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-20…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.0405 Published 2015-01-21 Partial fix

TI-2014-05437 CVE-2014-6587 · GHSA-6v6g-fc35-c9jw

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to…

LOW 20

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVSS 2.0MEDIUM 4.3 Local Low privileges Interaction — EPSS 0.00405 Published 2015-01-21 Fixed

TI-2014-05435 CVE-2014-6585 · GHSA-mr97-jqw9-fp77

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote…

LOW 20

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6591.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.04297 Published 2015-01-21 Partial fix