RHSA-2007:0072CriticalCVSS 9.1

Red Hat Security Advisory: IBMJava2 security update

Published
January 24, 2007
Last Modified
November 7, 2026

🔗 CVE IDs covered (5)

CVE-2006-4339 →CVE-2006-6731 →CVE-2006-6736 →CVE-2006-6737 →CVE-2007-0243 →

📋 Description

CVE-2006-4339 — OpenSSL: OpenSSL: Signature forgery via improper PKCS-1 padding removal leading to certificate validation bypass CVE-2006-6731 — security flaw CVE-2006-6736 — security flaw CVE-2006-6737 — security flaw CVE-2007-0243 — java-jre: GIF buffer overflow

🎯 Affected products15

  • Red Hat Enterprise Linux AS (Advanced Server) version 2.1
  • Red Hat Enterprise Linux ES version 2.1
  • Red Hat Enterprise Linux WS version 2.1
  • IBMJava2-JRE-1:1.3.1-12.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1
  • IBMJava2-JRE-1:1.3.1-12.i386 as a component of Red Hat Enterprise Linux ES version 2.1
  • IBMJava2-JRE-1:1.3.1-12.i386 as a component of Red Hat Enterprise Linux WS version 2.1
  • IBMJava2-JRE-1:1.3.1-12.src as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1
  • IBMJava2-JRE-1:1.3.1-12.src as a component of Red Hat Enterprise Linux ES version 2.1
  • IBMJava2-JRE-1:1.3.1-12.src as a component of Red Hat Enterprise Linux WS version 2.1
  • IBMJava2-SDK-1:1.3.1-11.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1
  • IBMJava2-SDK-1:1.3.1-11.i386 as a component of Red Hat Enterprise Linux ES version 2.1
  • IBMJava2-SDK-1:1.3.1-11.i386 as a component of Red Hat Enterprise Linux WS version 2.1
  • IBMJava2-SDK-1:1.3.1-11.src as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1
  • IBMJava2-SDK-1:1.3.1-11.src as a component of Red Hat Enterprise Linux ES version 2.1
  • IBMJava2-SDK-1:1.3.1-11.src as a component of Red Hat Enterprise Linux WS version 2.1

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. To update all RPMs for your particular architecture, run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (5)