Red Hat Security Advisory: Red Hat Network Satellite Server Sun Java Runtime security update
🔗 CVE IDs covered (7)
📋 Description
CVE-2008-3103 — OpenJDK JMX allows illegal operations with local monitoring (6332953) CVE-2008-3104 — Java RE allows Same Origin Policy to be Bypassed (6687932) CVE-2008-3107 — JDK untrusted applet/application privilege escalation (6661918) CVE-2008-3111 — Java Web Start Buffer overflow vulnerabilities (6557220) CVE-2008-3112 — Java Web Start, arbitrary file creation (6703909) CVE-2008-3113 — Java Web Start arbitrary file creation/deletion file with user permissions (6704077) CVE-2008-3114 — Java Web Start, untrusted application may determine Cache Location (6704074)
🎯 Affected products5
- Red Hat Satellite 5.1 (RHEL v.4 AS)
- java-1.5.0-sun-0:1.5.0.16-1jpp.2.el4.i586 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)
- java-1.5.0-sun-0:1.5.0.16-1jpp.2.el4.x86_64 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)
- java-1.5.0-sun-devel-0:1.5.0.16-1jpp.2.el4.i586 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)
- java-1.5.0-sun-devel-0:1.5.0.16-1jpp.2.el4.x86_64 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)
✅ Remediation
This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://www.redhat.com/docs/manuals/satellite/Red_Hat_Network_Satellite-5.1.0/html/Installation_Guide/s1-maintenance-update.html
🔗 References (10)
- selfhttps://access.redhat.com/errata/RHSA-2008:0636
- externalhttps://access.redhat.com/security/updates/classification/#low
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=452658
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=452659
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=454605
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=454601
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=454606
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=454607
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=454608
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0636.json