Red Hat Security Advisory

RHSA-2015:1485

java-1.7.1-ibm security update

Released 2015-07-22 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1, java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.1.el7_1, java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1 +3
Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1, java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.1.el7_1, java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1 +1
Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7, java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.3.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.3.el6_7 +3
Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7, java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.3.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.3.el6_7 +1
Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7, java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.3.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.3.el6_7 +3
Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.ael7b_1, java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1, java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.ppc +11
Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7, java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.3.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.3.el6_7 +3
Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1, java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.1.el7_1, java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1 +3

Fixes 20 records

TI-2015-02278 CVE-2015-2590 · GHSA-mhp7-xhx6-9x45

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded…

CRITICAL 100KEV

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.25469 Published 2015-07-16 Fixed

TI-2015-03970 CVE-2015-4748 · GHSA-fvmj-2grm-x9mr

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and…

HIGH 70

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown ve…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.44632 Published 2015-07-16 Fixed

TI-2015-03381 CVE-2015-4000 · GHSA-v98w-p8f7-9qqf

The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server…

MEDIUM 63

The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgra…

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.9986 Published 2015-05-21 Partial fix CWE-295

TI-2015-03982 CVE-2015-4760 · GHSA-r4j6-f9x3-8g4r

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers…

MEDIUM 59

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07039 Published 2015-07-16 Partial fix

TI-2015-03954 CVE-2015-4732 · GHSA-h7cx-3rw4-cg8f

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded…

MEDIUM 58

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06464 Published 2015-07-16 Fixed

TI-2015-03953 CVE-2015-4731 · GHSA-44j6-w488-fjgw

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75…

MEDIUM 58

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05772 Published 2015-07-16 Fixed

TI-2015-02326 CVE-2015-2638 · GHSA-6mqv-xf3m-2rgf

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java…

MEDIUM 57

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relat…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05639 Published 2015-07-16 Fixed

TI-2015-03955 CVE-2015-4733 · GHSA-fg3m-fh8c-xhjv

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded…

MEDIUM 52

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05772 Published 2015-07-16 Fixed

TI-2015-03958 CVE-2015-4736 · GHSA-5v9f-v3c3-wfc7

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to…

MEDIUM 47

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04423 Published 2015-07-16 Fixed

TI-2015-02309 CVE-2015-2621 · GHSA-47wq-2rqg-gf6v

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded…

LOW 36

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33, allows remote attackers to affect confidentiality via vectors related to JMX.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03919 Published 2015-07-16 Fixed

TI-2015-02325 CVE-2015-2637 · GHSA-5v9r-5v72-fpvc

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java…

LOW 35

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03455 Published 2015-07-16 Fixed

TI-2015-02289 CVE-2015-2601 · GHSA-gjjj-w44p-x78r

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and…

LOW 35

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03616 Published 2015-07-16 Fixed

TI-2015-02352 CVE-2015-2664 · GHSA-x5gm-3hm9-cfcj

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows local users to…

LOW 33

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00421 Published 2015-07-16 Fixed

TI-2015-02320 CVE-2015-2632 · GHSA-cf3m-hfmx-8m8q

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers…

LOW 30

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04419 Published 2015-07-16 Partial fix

TI-2015-02307 CVE-2015-2619 · GHSA-gfgh-pcg4-5gm7

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE…

LOW 29

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03177 Published 2015-07-16 Fixed

TI-2015-02301 CVE-2015-2613 · GHSA-mg25-f862-wmh3

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and…

LOW 29

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03813 Published 2015-07-16 Partial fix

TI-2015-03971 CVE-2015-4749 · GHSA-fcxj-c3r5-gmvr

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and…

LOW 26

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect availability via vectors related to JNDI.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03319 Published 2015-07-16 Fixed

TI-2015-02313 CVE-2015-2625 · GHSA-r9xx-mc22-4j87

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and…

LOW 26

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JSSE.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.03815 Published 2015-07-16 Fixed

TI-2015-03951 CVE-2015-4729 · GHSA-rc45-q9qx-m5xx

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to…

LOW 24

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.02678 Published 2015-07-16 Fixed

TI-2015-01736 CVE-2015-1931 · GHSA-43cg-c28c-82hq

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1…

LOW 24

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information i…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00222 Published 2020-01-23 Fixed CWE-312