Red Hat Security AdvisoryRHSA-2015:0136
java-1.5.0-ibm security update
Released 2015-02-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el5, java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el5.i386, java-1.5.0-ibm-accessibility-1:1.5.0.16.9-1jpp.1.el5 +11
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6, java-1.5.0-ibm-demo-1:1.5.0.16.9-1jpp.1.el6_6, java-1.5.0-ibm-devel-1:1.5.0.16.9-1jpp.1.el6_6 +4
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6, java-1.5.0-ibm-demo-1:1.5.0.16.9-1jpp.1.el6_6, java-1.5.0-ibm-devel-1:1.5.0.16.9-1jpp.1.el6_6 +2
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el5, java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el5.i386, java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el5.ppc +20
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6, java-1.5.0-ibm-demo-1:1.5.0.16.9-1jpp.1.el6_6, java-1.5.0-ibm-devel-1:1.5.0.16.9-1jpp.1.el6_6 +7
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6, java-1.5.0-ibm-demo-1:1.5.0.16.9-1jpp.1.el6_6, java-1.5.0-ibm-devel-1:1.5.0.16.9-1jpp.1.el6_6 +4
Fixes 9 records
Priority MEDIUM 55
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related t…
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.66374 · Published 2015-01-21 · Fixed
Priority MEDIUM 53
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06877 · Published 2015-01-21 · Fixed
Priority MEDIUM 53
Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attacke…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07244 · Published 2015-03-06 · Fixed
Priority MEDIUM 49
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05909 · Published 2015-01-21 · Fixed
Priority MEDIUM 41
Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attacke…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.04453 · Published 2015-03-06 · Fixed
Priority LOW 31
Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affe…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05032 · Published 2015-01-21 · Fixed
Priority LOW 30
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Swing.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04351 · Published 2015-01-21 · Fixed
Priority LOW 20
Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-20…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.0405 · Published 2015-01-21 · Partial fix
Priority LOW 20
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6591.
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.04297 · Published 2015-01-21 · Partial fix
THREATIST.IORead the docs