Skip to content
OpenAdvisories
Unscored RHSA-2008:1025 20 CVEs

Red Hat Security Advisory: java-1.5.0-sun security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-sun 0:1.5.0.17-1jpp.2.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-sun-demo 0:1.5.0.17-1jpp.2.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-sun-devel 0:1.5.0.17-1jpp.2.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-sun-jdbc 0:1.5.0.17-1jpp.2.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-sun-plugin 0:1.5.0.17-1jpp.2.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-sun-src 0:1.5.0.17-1jpp.2.el4
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-sun 0:1.5.0.17-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-sun-demo 0:1.5.0.17-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-sun-devel 0:1.5.0.17-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-sun-jdbc 0:1.5.0.17-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-sun-plugin 0:1.5.0.17-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-sun-src 0:1.5.0.17-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-sun 0:1.5.0.17-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-sun-demo 0:1.5.0.17-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-sun-devel 0:1.5.0.17-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-sun-jdbc 0:1.5.0.17-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-sun-plugin 0:1.5.0.17-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-sun-src 0:1.5.0.17-1jpp.2.el5

Vulnerabilities 20

  • Unscored —
    CVE-2008-2086

    Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and…

  • Unscored —
    CVE-2008-5339

    Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK an…

  • Unscored —
    CVE-2008-5340

    Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK an…

  • Unscored —
    CVE-2008-5341

    Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JD…

  • Unscored —
    CVE-2008-5342

    Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 1…

  • Unscored —
    CVE-2008-5343

    Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earli…

  • Unscored —
    CVE-2008-5344

    Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK an…

  • Unscored —
    CVE-2008-5345

    Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5…

  • Unscored —
    CVE-2008-5346

    Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE …

  • Unscored —
    CVE-2008-5348

    Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.…

  • Unscored —
    CVE-2008-5349

    Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JR…

  • Unscored —
    CVE-2008-5350

    Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.…

  • Unscored —
    CVE-2008-5351

    Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and …

  • Unscored —
    CVE-2008-5352

    Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environmen…

  • Unscored —
    CVE-2008-5353 Public exploit EPSS 86%

    The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; …

  • Unscored —
    CVE-2008-5354

    Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE …

  • Unscored —
    CVE-2008-5356

    Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5…

  • Unscored —
    CVE-2008-5357 EPSS 10%

    Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update …

  • Unscored —
    CVE-2008-5359 EPSS 11%

    Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 1…

  • Unscored —
    CVE-2008-5360

    Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK …

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://blogs.sun.com/security/entry/advance_notification_of_security_updates3
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474556
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_1025.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-2086
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2086
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2086
  • report
    https://access.redhat.com/security/cve/CVE-2008-5339
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474772
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5339
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5339
  • report
    https://access.redhat.com/security/cve/CVE-2008-5340
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474773
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5340
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5340
  • report
    https://access.redhat.com/security/cve/CVE-2008-5341
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474786
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5341
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5341
  • report
    https://access.redhat.com/security/cve/CVE-2008-5342
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474789
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5342
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5342
  • report
    https://access.redhat.com/security/cve/CVE-2008-5343
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474790
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5343
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5343
  • report
    https://access.redhat.com/security/cve/CVE-2008-5344
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474792
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5344
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5344
  • report
    https://access.redhat.com/security/cve/CVE-2008-5345
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474793
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5345
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5345
  • report
    https://access.redhat.com/security/cve/CVE-2008-5346
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474794
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5346
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5346