Skip to content
OpenAdvisories
Critical RHSA-2010:0807 17 CVEs

Red Hat Security Advisory: java-1.5.0-ibm security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 23

ReleasePackageFixed in
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-ibm 1:1.5.0.12.2-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-ibm-demo 1:1.5.0.12.2-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-ibm-devel 1:1.5.0.12.2-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-ibm-javacomm 1:1.5.0.12.2-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-ibm-jdbc 1:1.5.0.12.2-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-ibm-plugin 1:1.5.0.12.2-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-ibm-src 1:1.5.0.12.2-1jpp.1.el4
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm 1:1.5.0.12.2-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm-accessibility 1:1.5.0.12.2-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm-demo 1:1.5.0.12.2-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm-devel 1:1.5.0.12.2-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm-javacomm 1:1.5.0.12.2-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm-jdbc 1:1.5.0.12.2-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm-plugin 1:1.5.0.12.2-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm-src 1:1.5.0.12.2-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm 1:1.5.0.12.2-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm-accessibility 1:1.5.0.12.2-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm-demo 1:1.5.0.12.2-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm-devel 1:1.5.0.12.2-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm-javacomm 1:1.5.0.12.2-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm-jdbc 1:1.5.0.12.2-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm-plugin 1:1.5.0.12.2-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm-src 1:1.5.0.12.2-1jpp.1.el5

Vulnerabilities 17

  • Critical 9.8
    CVE-2009-3555 Public exploit EPSS 87%

    Apache Tomcat affected by vulnerability in TLS and SSL protocol

    The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Serv…

    openssl apache2 org.apache.tomcat:tomcat nss Debian Maven
  • Unscored —
    CVE-2010-1321

    The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.…

    krb5 heimdal Debian
  • Unscored —
    CVE-2010-3541

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 2…

  • Unscored —
    CVE-2010-3548

    Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Bu…

  • Unscored —
    CVE-2010-3549

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 2…

  • Unscored —
    CVE-2010-3550

    Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 U…

  • Unscored —
    CVE-2010-3551

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 2…

  • Unscored —
    CVE-2010-3556

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2…

  • Unscored —
    CVE-2010-3559

    Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.…

  • Unscored —
    CVE-2010-3562

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2…

  • Unscored —
    CVE-2010-3565

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1…

  • Unscored —
    CVE-2010-3566

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update and 25 al…

  • Unscored —
    CVE-2010-3568

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21…

  • Unscored —
    CVE-2010-3569

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21…

  • Unscored —
    CVE-2010-3572

    Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.…

  • Unscored —
    CVE-2010-3573 Public exploit EPSS 11%

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Updat…

  • Unscored —
    CVE-2010-3574

    Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 2…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.ibm.com/developerworks/java/jdk/alerts/
  • article
    https://access.redhat.com/kb/docs/DOC-20491
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533125
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=582466
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=639876
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=639897
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=639909
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=639920
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=639922
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=639925
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642180
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642187
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642202
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642215
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642559
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642576
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642606
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=642611
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0807.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-3555
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3555
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3555
  • report
    https://access.redhat.com/security/cve/CVE-2010-1321
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1321
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1321
  • report
    https://access.redhat.com/security/cve/CVE-2010-3541
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3541
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3541
  • report
    https://access.redhat.com/security/cve/CVE-2010-3548
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3548
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3548
  • report
    https://access.redhat.com/security/cve/CVE-2010-3549
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3549
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3549
  • report
    https://access.redhat.com/security/cve/CVE-2010-3550
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3550
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3550
  • report
    https://access.redhat.com/security/cve/CVE-2010-3551