RHSA-2008:0156Medium
Red Hat Security Advisory: java-1.5.0-bea security update
🔗 CVE IDs covered (5)
📋 Description
CVE-2007-5232 — Security Vulnerability in Java Runtime Environment With Applet Caching CVE-2007-5239 — Untrusted Application or Applet May Move or Copy Arbitrary Files CVE-2007-5240 — Applets or Applications are allowed to display an oversized window CVE-2007-5273 — Anti-DNS Pinning and Java Applets with HTTP proxy CVE-2008-0657 — java-1.5.0 Privilege escalation via unstrusted applet and application
🎯 Affected products18
- Red Hat Enterprise Linux Server Supplementary (v. 5)
- java-1.5.0-bea-0:1.5.0.14-1jpp.1.el5.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
- java-1.5.0-bea-0:1.5.0.14-1jpp.1.el5.ia64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
- java-1.5.0-bea-0:1.5.0.14-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
- java-1.5.0-bea-demo-0:1.5.0.14-1jpp.1.el5.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
- java-1.5.0-bea-demo-0:1.5.0.14-1jpp.1.el5.ia64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
- java-1.5.0-bea-demo-0:1.5.0.14-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
- java-1.5.0-bea-devel-0:1.5.0.14-1jpp.1.el5.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
- java-1.5.0-bea-devel-0:1.5.0.14-1jpp.1.el5.ia64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
- java-1.5.0-bea-devel-0:1.5.0.14-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
- java-1.5.0-bea-jdbc-0:1.5.0.14-1jpp.1.el5.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
- java-1.5.0-bea-jdbc-0:1.5.0.14-1jpp.1.el5.ia64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
- java-1.5.0-bea-jdbc-0:1.5.0.14-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
- java-1.5.0-bea-missioncontrol-0:1.5.0.14-1jpp.1.el5.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
- java-1.5.0-bea-missioncontrol-0:1.5.0.14-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
- java-1.5.0-bea-src-0:1.5.0.14-1jpp.1.el5.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
- java-1.5.0-bea-src-0:1.5.0.14-1jpp.1.el5.ia64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
- java-1.5.0-bea-src-0:1.5.0.14-1jpp.1.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
✅ Remediation
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188
🔗 References (9)
- selfhttps://access.redhat.com/errata/RHSA-2008:0156
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttp://dev2dev.bea.com/pub/advisory/272
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=321951
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=321981
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=321991
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=324351
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=431861
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0156.json