Skip to content
OpenAdvisories
Critical RHSA-2010:0786 14 CVEs

Red Hat Security Advisory: java-1.4.2-ibm security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 27

ReleasePackageFixed in
Red Hat · RHEL 3 rhel_extras:3 java-1.4.2-ibm 0:1.4.2.13.6-1jpp.3.el3
Red Hat · RHEL 3 rhel_extras:3 java-1.4.2-ibm-demo 0:1.4.2.13.6-1jpp.3.el3
Red Hat · RHEL 3 rhel_extras:3 java-1.4.2-ibm-devel 0:1.4.2.13.6-1jpp.3.el3
Red Hat · RHEL 3 rhel_extras:3 java-1.4.2-ibm-jdbc 0:1.4.2.13.6-1jpp.3.el3
Red Hat · RHEL 3 rhel_extras:3 java-1.4.2-ibm-plugin 0:1.4.2.13.6-1jpp.3.el3
Red Hat · RHEL 3 rhel_extras:3 java-1.4.2-ibm-src 0:1.4.2.13.6-1jpp.3.el3
Red Hat · RHEL 4 rhel_extras:4 java-1.4.2-ibm 0:1.4.2.13.6-1jpp.2.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.4.2-ibm-demo 0:1.4.2.13.6-1jpp.2.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.4.2-ibm-devel 0:1.4.2.13.6-1jpp.2.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.4.2-ibm-javacomm 0:1.4.2.13.6-1jpp.2.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.4.2-ibm-jdbc 0:1.4.2.13.6-1jpp.2.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.4.2-ibm-plugin 0:1.4.2.13.6-1jpp.2.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.4.2-ibm-src 0:1.4.2.13.6-1jpp.2.el4
Red Hat · RHEL 5 rhel_extras:5::client java-1.4.2-ibm 0:1.4.2.13.6-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.4.2-ibm-demo 0:1.4.2.13.6-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.4.2-ibm-devel 0:1.4.2.13.6-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.4.2-ibm-javacomm 0:1.4.2.13.6-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.4.2-ibm-jdbc 0:1.4.2.13.6-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.4.2-ibm-plugin 0:1.4.2.13.6-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.4.2-ibm-src 0:1.4.2.13.6-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.4.2-ibm 0:1.4.2.13.6-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.4.2-ibm-demo 0:1.4.2.13.6-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.4.2-ibm-devel 0:1.4.2.13.6-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.4.2-ibm-javacomm 0:1.4.2.13.6-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.4.2-ibm-jdbc 0:1.4.2.13.6-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.4.2-ibm-plugin 0:1.4.2.13.6-1jpp.2.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.4.2-ibm-src 0:1.4.2.13.6-1jpp.2.el5

Vulnerabilities 14

  • Critical 9.8
    CVE-2009-3555 Public exploit EPSS 87%

    Apache Tomcat affected by vulnerability in TLS and SSL protocol

    The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Serv…

    openssl apache2 org.apache.tomcat:tomcat nss Debian Maven
  • Unscored —
    CVE-2010-3541

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 2…

  • Unscored —
    CVE-2010-3548

    Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Bu…

  • Unscored —
    CVE-2010-3549

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 2…

  • Unscored —
    CVE-2010-3551

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 2…

  • Unscored —
    CVE-2010-3553

    Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.…

  • Unscored —
    CVE-2010-3556

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2…

  • Unscored —
    CVE-2010-3557

    Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.…

  • Unscored —
    CVE-2010-3562

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2…

  • Unscored —
    CVE-2010-3565

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1…

  • Unscored —
    CVE-2010-3568

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21…

  • Unscored —
    CVE-2010-3569

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21…

  • Unscored —
    CVE-2010-3571

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2…

  • Unscored —
    CVE-2010-3572

    Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.ibm.com/developerworks/java/jdk/alerts/
  • article
    https://access.redhat.com/kb/docs/DOC-20491
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533125
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=639876
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=639897
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=639904
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=639909
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=639920
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=639925
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642167
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642180
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642187
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642202
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642576
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642585
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642611
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0786.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-3555
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3555
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3555
  • report
    https://access.redhat.com/security/cve/CVE-2010-3541
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3541
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3541
  • report
    https://access.redhat.com/security/cve/CVE-2010-3548
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3548
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3548
  • report
    https://access.redhat.com/security/cve/CVE-2010-3549
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3549
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3549
  • report
    https://access.redhat.com/security/cve/CVE-2010-3551
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3551
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3551
  • report
    https://access.redhat.com/security/cve/CVE-2010-3553
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3553
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3553
  • report
    https://access.redhat.com/security/cve/CVE-2010-3556
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3556
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3556