Red Hat Security Advisory

RHSA-2015:2506

java-1.7.1-ibm security update

Released 2015-11-23 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.3.20-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.3.20-1jpp.1.el7 +3
Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.3.20-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.3.20-1jpp.1.el7 +1
Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7, java-1.7.1-ibm-demo-1:1.7.1.3.20-1jpp.1.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.20-1jpp.1.el6_7 +3
Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7, java-1.7.1-ibm-demo-1:1.7.1.3.20-1jpp.1.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.20-1jpp.1.el6_7 +1
Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7, java-1.7.1-ibm-demo-1:1.7.1.3.20-1jpp.1.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.20-1jpp.1.el6_7 +3
Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7, java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7.ppc, java-1.7.1-ibm-demo-1:1.7.1.3.20-1jpp.1.el7 +6
Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7, java-1.7.1-ibm-demo-1:1.7.1.3.20-1jpp.1.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.20-1jpp.1.el6_7 +3
Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.3.20-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.3.20-1jpp.1.el7 +3

Fixes 19 records

TI-2015-04118 CVE-2015-4902 · GHSA-69xw-2hhx-gvfg

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers…

HIGH 81KEV

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.13603 Published 2015-10-21 Fixed CWE-284

TI-2015-04063 CVE-2015-4843 · GHSA-5hrw-33cx-6w79

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded…

MEDIUM 60

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08934 Published 2015-10-21 Fixed

TI-2015-04064 CVE-2015-4844 · GHSA-2rrf-qm4c-8229

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded…

MEDIUM 59

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07514 Published 2015-10-21 Partial fix

TI-2015-04055 CVE-2015-4835 · GHSA-hw42-jfwx-84h9

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded…

MEDIUM 58

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06416 Published 2015-10-21 Partial fix

TI-2015-04101 CVE-2015-4883 · GHSA-vw5f-vf9g-7xvr

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded…

MEDIUM 57

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05611 Published 2015-10-21 Fixed

TI-2015-04078 CVE-2015-4860 · GHSA-x59v-wff7-pprc

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded…

MEDIUM 57

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05611 Published 2015-10-21 Fixed

TI-2015-04027 CVE-2015-4805 · GHSA-cq64-ppmj-mrvv

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded…

MEDIUM 57

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05611 Published 2015-10-21 Fixed

TI-2015-04028 CVE-2015-4806 · GHSA-wp67-hpr4-56mq

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded…

MEDIUM 42

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03412 Published 2015-10-21 Fixed

TI-2015-04110 CVE-2015-4893 · GHSA-g9px-7f52-qj47

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51…

LOW 36

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04637 Published 2015-10-21 Partial fix

TI-2015-04062 CVE-2015-4842 · GHSA-phv4-p2cw-7frr

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded…

LOW 36

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04082 Published 2015-10-21 Partial fix

TI-2015-04025 CVE-2015-4803 · GHSA-8p8r-6fqw-9vx7

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51…

LOW 36

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04637 Published 2015-10-21 Partial fix

TI-2015-03956 CVE-2015-4734 · GHSA-w858-6895-v667

Unspecified vulnerability in Oracle Java SE 6u101, 7u85 and 8u60, and Java SE Embedded…

LOW 36

Unspecified vulnerability in Oracle Java SE 6u101, 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JGSS.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04116 Published 2015-10-21 Partial fix

TI-2015-04119 CVE-2015-4903 · GHSA-wx9q-j373-mc8m

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded…

LOW 35

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to RMI.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03438 Published 2015-10-21 Fixed

TI-2015-04100 CVE-2015-4882 · GHSA-rpc4-6m39-x2wh

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded…

LOW 35

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect availability via vectors related to CORBA.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03875 Published 2015-10-21 Partial fix

TI-2015-04090 CVE-2015-4872 · GHSA-hvr5-v3pf-2jmv

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51…

LOW 35

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect integrity via unknown vectors related to Security.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03218 Published 2015-10-21 Fixed

TI-2015-04060 CVE-2015-4840 · GHSA-24cm-p92g-3mhv

Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51…

LOW 35

Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via unknown vectors related to 2D.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03438 Published 2015-10-21 Partial fix

TI-2015-04089 CVE-2015-4871 · GHSA-gq58-crwm-qgwh

Unspecified vulnerability in Oracle Java SE 7u85 allows remote attackers to affect…

LOW 32

Unspecified vulnerability in Oracle Java SE 7u85 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.0304 Published 2015-10-21 Fixed

TI-2015-04032 CVE-2015-4810 · GHSA-f4x8-385p-3m28

Unspecified vulnerability in Oracle Java SE 7u85 and 8u60 allows local users to affect…

LOW 31

Unspecified vulnerability in Oracle Java SE 7u85 and 8u60 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00412 Published 2015-10-21 Fixed

TI-2015-04203 CVE-2015-5006 · GHSA-rm84-76qf-3pxc

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1…

LOW 12

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow physically proximate attackers to obtain sensitiv…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00482 Published 2015-12-07 Partial fix CWE-200