Skip to content
OpenAdvisories
Critical RHSA-2009:1694 14 CVEs

Red Hat Security Advisory: java-1.6.0-ibm security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 23

ReleasePackageFixed in
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-ibm 1:1.6.0.7-1jpp.3.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-ibm-demo 1:1.6.0.7-1jpp.3.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-ibm-devel 1:1.6.0.7-1jpp.3.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-ibm-javacomm 1:1.6.0.7-1jpp.3.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-ibm-jdbc 1:1.6.0.7-1jpp.3.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-ibm-plugin 1:1.6.0.7-1jpp.3.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.6.0-ibm-src 1:1.6.0.7-1jpp.3.el4
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm 1:1.6.0.7-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm-accessibility 1:1.6.0.7-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm-demo 1:1.6.0.7-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm-devel 1:1.6.0.7-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm-javacomm 1:1.6.0.7-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm-jdbc 1:1.6.0.7-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm-plugin 1:1.6.0.7-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm-src 1:1.6.0.7-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm 1:1.6.0.7-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-accessibility 1:1.6.0.7-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-demo 1:1.6.0.7-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-devel 1:1.6.0.7-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-javacomm 1:1.6.0.7-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-jdbc 1:1.6.0.7-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-plugin 1:1.6.0.7-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-src 1:1.6.0.7-1jpp.2.el5

Vulnerabilities 14

  • Critical 9.8
    CVE-2009-3555 Public exploit EPSS 87%

    Apache Tomcat affected by vulnerability in TLS and SSL protocol

    The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Serv…

    openssl apache2 org.apache.tomcat:tomcat nss Debian Maven
  • Medium —
    CVE-2009-0217

    Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation

    The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server…

    mono org.apache.santuario:xmlsec xml-security-c xmlsec1 Debian Maven
  • Unscored —
    CVE-2009-3865

    The launch method in the Deployment Toolkit plugin in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 6 be…

  • Unscored —
    CVE-2009-3866

    The Java Web Start Installer in Sun Java SE in JDK and JRE 6 before Update 17 does not properly use security model perm…

  • Unscored —
    CVE-2009-3867 Public exploit EPSS 73%

    Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, …

  • Unscored —
    CVE-2009-3868

    Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and…

  • Unscored —
    CVE-2009-3869 Public exploit EPSS 65%

    Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment…

  • Unscored —
    CVE-2009-3871

    Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environme…

  • Unscored —
    CVE-2009-3872

    Unspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 be…

  • Unscored —
    CVE-2009-3873

    The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and J…

  • Unscored —
    CVE-2009-3874

    Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 befo…

  • Unscored —
    CVE-2009-3875

    The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22…

  • Unscored —
    CVE-2009-3876

    Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and J…

  • Unscored —
    CVE-2009-3877

    Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and J…

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533215
  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.ibm.com/developerworks/java/jdk/alerts/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530053
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530057
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530061
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530062
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530063
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530067
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=532906
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533211
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533212
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=511915
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533214
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1694.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-0217
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0217
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0217
  • report
    https://access.redhat.com/security/cve/CVE-2009-3555
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533125
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3555
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3555
  • report
    https://access.redhat.com/security/cve/CVE-2009-3865
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3865
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3865
  • report
    https://access.redhat.com/security/cve/CVE-2009-3866
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3866
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3866
  • report
    https://access.redhat.com/security/cve/CVE-2009-3867
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3867
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3867
  • report
    https://access.redhat.com/security/cve/CVE-2009-3868
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3868
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3868
  • report
    https://access.redhat.com/security/cve/CVE-2009-3869
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3869
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3869
  • report
    https://access.redhat.com/security/cve/CVE-2009-3871
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3871