Skip to content
OpenAdvisories
Critical RHSA-2015:1007 13 CVEs

Red Hat Security Advisory: java-1.7.0-ibm security update

Published Sep 22, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 5 rhel_extras:5::client java-1.7.0-ibm 1:1.7.0.9.0-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.7.0-ibm-demo 1:1.7.0.9.0-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.7.0-ibm-devel 1:1.7.0.9.0-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.7.0-ibm-jdbc 1:1.7.0.9.0-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.7.0-ibm-plugin 1:1.7.0.9.0-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.7.0-ibm-src 1:1.7.0.9.0-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.7.0-ibm 1:1.7.0.9.0-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.7.0-ibm-demo 1:1.7.0.9.0-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.7.0-ibm-devel 1:1.7.0.9.0-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.7.0-ibm-jdbc 1:1.7.0.9.0-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.7.0-ibm-plugin 1:1.7.0.9.0-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.7.0-ibm-src 1:1.7.0.9.0-1jpp.1.el5

Vulnerabilities 13

  • Critical 9.8
    CVE-2015-0192

    Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before S…

  • Low 3.7
    CVE-2015-2808 EPSS 74%

    The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data dur…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2005-1080

    Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows…

    openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0138

    GSKit in IBM Tivoli Directory Server (ITDS) 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6…

  • Unscored —
    CVE-2015-0458

    Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, …

  • Unscored —
    CVE-2015-0459

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX 2.2.76, allows remote attackers to…

  • Unscored —
    CVE-2015-0469

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0477

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity vi…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0478

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers …

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0480

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity an…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0488

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers …

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-0491

    Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows remote attackers t…

  • Unscored —
    CVE-2015-1914

    IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote …

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://www.ibm.com/developerworks/java/jdk/alerts/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1207101#c4
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=606442
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1207101
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1210355
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1210829
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1211299
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1211504
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1211543
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1211768
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1211769
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1211771
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1219212
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1219215
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1219223
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1007.json
  • report
    https://access.redhat.com/security/cve/CVE-2005-1080
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-1080
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-1080
  • report
    https://access.redhat.com/security/cve/CVE-2015-0138
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0138
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0138
  • report
    https://access.redhat.com/security/cve/CVE-2015-0192
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0192
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0192
  • report
    https://access.redhat.com/security/cve/CVE-2015-0458
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0458
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0458
  • article
    http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixJAVA
  • report
    https://access.redhat.com/security/cve/CVE-2015-0459
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0459
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0459
  • report
    https://access.redhat.com/security/cve/CVE-2015-0469
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0469
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0469
  • report
    https://access.redhat.com/security/cve/CVE-2015-0477
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0477
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0477