Skip to content
OpenAdvisories
Low RHSA-2014:1881 9 CVEs

Red Hat Security Advisory: java-1.5.0-ibm security update

Published Sep 22, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 23

ReleasePackageFixed in
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm 1:1.5.0.16.8-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm-accessibility 1:1.5.0.16.8-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm-demo 1:1.5.0.16.8-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm-devel 1:1.5.0.16.8-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm-javacomm 1:1.5.0.16.8-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm-jdbc 1:1.5.0.16.8-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm-plugin 1:1.5.0.16.8-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-ibm-src 1:1.5.0.16.8-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm 1:1.5.0.16.8-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm-accessibility 1:1.5.0.16.8-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm-demo 1:1.5.0.16.8-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm-devel 1:1.5.0.16.8-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm-javacomm 1:1.5.0.16.8-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm-jdbc 1:1.5.0.16.8-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm-plugin 1:1.5.0.16.8-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-ibm-src 1:1.5.0.16.8-1jpp.1.el5
Red Hat · RHEL 6 rhel_extras:6 java-1.5.0-ibm 1:1.5.0.16.8-1jpp.1.el6_6
Red Hat · RHEL 6 rhel_extras:6 java-1.5.0-ibm-demo 1:1.5.0.16.8-1jpp.1.el6_6
Red Hat · RHEL 6 rhel_extras:6 java-1.5.0-ibm-devel 1:1.5.0.16.8-1jpp.1.el6_6
Red Hat · RHEL 6 rhel_extras:6 java-1.5.0-ibm-javacomm 1:1.5.0.16.8-1jpp.1.el6_6
Red Hat · RHEL 6 rhel_extras:6 java-1.5.0-ibm-jdbc 1:1.5.0.16.8-1jpp.1.el6_6
Red Hat · RHEL 6 rhel_extras:6 java-1.5.0-ibm-plugin 1:1.5.0.16.8-1jpp.1.el6_6
Red Hat · RHEL 6 rhel_extras:6 java-1.5.0-ibm-src 1:1.5.0.16.8-1jpp.1.el6_6

Vulnerabilities 9

  • Low 3.4
    CVE-2014-3566 Public exploit EPSS 100%

    The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which ma…

    openssl openssl openjdk-7 wolfssl Debian Ubuntu
  • Unscored —
    CVE-2014-3065

    Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1…

  • Unscored —
    CVE-2014-6457

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, a…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6502

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote atta…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6506

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote atta…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6511

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6512

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 an…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6531

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote atta…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2014-6558

    Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 an…

    openjdk-7 openjdk-6 Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://www.ibm.com/developerworks/java/jdk/alerts/
  • article
    https://www-01.ibm.com/support/docview.wss?uid=swg21688165
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1071210
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1150155
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1150651
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1150669
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1151046
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1151063
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1151517
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152789
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1162554
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1881.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3065
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3065
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3065
  • report
    https://access.redhat.com/security/cve/CVE-2014-3566
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3566
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3566
  • report
    https://access.redhat.com/security/cve/CVE-2014-6457
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6457
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6457
  • article
    http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html#AppendixJAVA
  • report
    https://access.redhat.com/security/cve/CVE-2014-6502
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6502
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6502
  • report
    https://access.redhat.com/security/cve/CVE-2014-6506
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6506
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6506
  • report
    https://access.redhat.com/security/cve/CVE-2014-6511
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6511
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6511
  • report
    https://access.redhat.com/security/cve/CVE-2014-6512
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6512
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6512
  • report
    https://access.redhat.com/security/cve/CVE-2014-6531
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-6531
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-6531
  • report
    https://access.redhat.com/security/cve/CVE-2014-6558