Skip to content
OpenAdvisories
Unscored RHSA-2009:0015 12 CVEs

Red Hat Security Advisory: java-1.6.0-ibm security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 23

ReleasePackageFixed in
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-ibm 1:1.6.0.3-1jpp.3.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-ibm-demo 1:1.6.0.3-1jpp.3.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-ibm-devel 1:1.6.0.3-1jpp.3.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-ibm-javacomm 1:1.6.0.3-1jpp.3.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-ibm-jdbc 1:1.6.0.3-1jpp.3.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-ibm-plugin 1:1.6.0.3-1jpp.3.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-ibm-src 1:1.6.0.3-1jpp.3.el4
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm 1:1.6.0.3-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm-accessibility 1:1.6.0.3-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm-demo 1:1.6.0.3-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm-devel 1:1.6.0.3-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm-javacomm 1:1.6.0.3-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm-jdbc 1:1.6.0.3-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm-plugin 1:1.6.0.3-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm-src 1:1.6.0.3-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm 1:1.6.0.3-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-accessibility 1:1.6.0.3-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-demo 1:1.6.0.3-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-devel 1:1.6.0.3-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-javacomm 1:1.6.0.3-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-jdbc 1:1.6.0.3-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-plugin 1:1.6.0.3-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-src 1:1.6.0.3-1jpp.1.el5

Vulnerabilities 12

  • Unscored —
    CVE-2008-2086

    Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and…

  • Unscored —
    CVE-2008-5339

    Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK an…

  • Unscored —
    CVE-2008-5344

    Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK an…

  • Unscored —
    CVE-2008-5345

    Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5…

  • Unscored —
    CVE-2008-5347

    Multiple unspecified vulnerabilities in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier allo…

  • Unscored —
    CVE-2008-5348

    Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.…

  • Unscored —
    CVE-2008-5350

    Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.…

  • Unscored —
    CVE-2008-5352

    Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environmen…

  • Unscored —
    CVE-2008-5353 Public exploit EPSS 86%

    The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; …

  • Unscored —
    CVE-2008-5354

    Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE …

  • Unscored —
    CVE-2008-5359 EPSS 11%

    Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 1…

  • Unscored —
    CVE-2008-5360

    Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK …

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www-128.ibm.com/developerworks/java/jdk/alerts/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=472201
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=472208
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=472209
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=472211
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=472212
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=472224
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=472228
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=472233
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474556
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474772
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474792
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=474793
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0015.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-2086
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2086
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2086
  • report
    https://access.redhat.com/security/cve/CVE-2008-5339
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5339
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5339
  • report
    https://access.redhat.com/security/cve/CVE-2008-5344
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5344
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5344
  • report
    https://access.redhat.com/security/cve/CVE-2008-5345
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5345
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5345
  • report
    https://access.redhat.com/security/cve/CVE-2008-5347
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5347
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5347
  • report
    https://access.redhat.com/security/cve/CVE-2008-5348
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5348
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5348
  • report
    https://access.redhat.com/security/cve/CVE-2008-5350
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5350
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5350
  • report
    https://access.redhat.com/security/cve/CVE-2008-5352
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5352
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5352