Skip to content
OpenAdvisories
Medium RHSA-2014:0508 24 CVEs

Red Hat Security Advisory: java-1.6.0-ibm security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 23

ReleasePackageFixed in
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm 1:1.6.0.16.0-1jpp.1.el5_10
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm-accessibility 1:1.6.0.16.0-1jpp.1.el5_10
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm-demo 1:1.6.0.16.0-1jpp.1.el5_10
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm-devel 1:1.6.0.16.0-1jpp.1.el5_10
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm-javacomm 1:1.6.0.16.0-1jpp.1.el5_10
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm-jdbc 1:1.6.0.16.0-1jpp.1.el5_10
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm-plugin 1:1.6.0.16.0-1jpp.1.el5_10
Red Hat · RHEL 5 rhel_extras:5::client java-1.6.0-ibm-src 1:1.6.0.16.0-1jpp.1.el5_10
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm 1:1.6.0.16.0-1jpp.1.el5_10
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-accessibility 1:1.6.0.16.0-1jpp.1.el5_10
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-demo 1:1.6.0.16.0-1jpp.1.el5_10
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-devel 1:1.6.0.16.0-1jpp.1.el5_10
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-javacomm 1:1.6.0.16.0-1jpp.1.el5_10
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-jdbc 1:1.6.0.16.0-1jpp.1.el5_10
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-plugin 1:1.6.0.16.0-1jpp.1.el5_10
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-src 1:1.6.0.16.0-1jpp.1.el5_10
Red Hat · RHEL 6 rhel_extras:6 java-1.6.0-ibm 1:1.6.0.16.0-1jpp.1.el6_5
Red Hat · RHEL 6 rhel_extras:6 java-1.6.0-ibm-demo 1:1.6.0.16.0-1jpp.1.el6_5
Red Hat · RHEL 6 rhel_extras:6 java-1.6.0-ibm-devel 1:1.6.0.16.0-1jpp.1.el6_5
Red Hat · RHEL 6 rhel_extras:6 java-1.6.0-ibm-javacomm 1:1.6.0.16.0-1jpp.1.el6_5
Red Hat · RHEL 6 rhel_extras:6 java-1.6.0-ibm-jdbc 1:1.6.0.16.0-1jpp.1.el6_5
Red Hat · RHEL 6 rhel_extras:6 java-1.6.0-ibm-plugin 1:1.6.0.16.0-1jpp.1.el6_5
Red Hat · RHEL 6 rhel_extras:6 java-1.6.0-ibm-src 1:1.6.0.16.0-1jpp.1.el6_5

Vulnerabilities 24

  • Medium 6.5
    CVE-2013-6954

    The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL po…

  • Unscored —
    CVE-2013-6629

    The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome befo…

    libjpeg-turbo Debian
  • Unscored —
    CVE-2014-0429

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedde…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0446

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attacke…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0449

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

  • Unscored —
    CVE-2014-0451

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attacke…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0452

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0453

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedde…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0457

    Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embe…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0458

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0460

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedde…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0461

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-0878

    The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edit…

  • Unscored —
    CVE-2014-1876

    The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2398

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 a…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2401

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows …

  • Unscored —
    CVE-2014-2409

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

  • Unscored —
    CVE-2014-2412

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote atta…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2414

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2420

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

  • Unscored —
    CVE-2014-2421

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows …

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2423

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2427

    Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attacke…

    openjdk-7 Ubuntu
  • Unscored —
    CVE-2014-2428

    Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to af…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://www.ibm.com/developerworks/java/jdk/alerts/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1031734
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1045561
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1060907
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1086632
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1086645
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1087409
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1087411
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1087417
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1087426
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1087427
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1087428
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1087430
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1087431
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1087434
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1087436
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1087439
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1087441
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1087442
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1088025
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1088027
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1088028
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1088030
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1088031
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0508.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-6629
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-6629
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-6629
  • report
    https://access.redhat.com/security/cve/CVE-2013-6954
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-6954
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-6954
  • report
    https://access.redhat.com/security/cve/CVE-2014-0429
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0429
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0429
  • article
    http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA
  • report
    https://access.redhat.com/security/cve/CVE-2014-0446
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0446
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0446