RHSA-2008:0638Low

Red Hat Security Advisory: Red Hat Network Satellite Server IBM Java Runtime security update

Published
August 13, 2008
Last Modified
June 28, 2026

🔗 CVE IDs covered (17)

CVE-2008-0657 →CVE-2008-1187 →CVE-2008-1188 →CVE-2008-1189 →CVE-2008-1190 →CVE-2008-1192 →CVE-2008-1193 →CVE-2008-1194 →CVE-2008-1195 →CVE-2008-1196 →CVE-2008-3104 →CVE-2008-3106 →CVE-2008-3108 →CVE-2008-3111 →CVE-2008-3112 →CVE-2008-3113 →CVE-2008-3114 →

📋 Description

CVE-2008-0657 — java-1.5.0 Privilege escalation via unstrusted applet and application CVE-2008-1187 — Untrusted applet and application XSLT processing privilege escalation CVE-2008-1188 — Buffer overflow security vulnerabilities in Java Web Start (CVE-2008-1189, CVE-2008-1190) CVE-2008-1189 — Buffer overflow security vulnerabilities in Java Web Start (CVE-2008-1189, CVE-2008-1190) CVE-2008-1190 — Buffer overflow security vulnerabilities in Java Web Start (CVE-2008-1189, CVE-2008-1190) CVE-2008-1192 — Java Plugin same-origin-policy bypass CVE-2008-1193 — JRE image parsing library allows privilege escalation (CVE-2008-1194) CVE-2008-1194 — JRE image parsing library allows privilege escalation (CVE-2008-1194) CVE-2008-1195 — Java-API calls in untrusted Javascript allow network privilege escalation CVE-2008-1196 — Buffer overflow security vulnerabilities in Java Web Start CVE-2008-3104 — Java RE allows Same Origin Policy to be Bypassed (6687932) CVE-2008-3106 — security flaw CVE-2008-3108 — Security Vulnerability with JRE fonts processing may allow Elevation of Privileges (6450319) CVE-2008-3111 — Java Web Start Buffer overflow vulnerabilities (6557220) CVE-2008-3112 — Java Web Start, arbitrary file creation (6703909) CVE-2008-3113 — Java Web Start arbitrary file creation/deletion file with user permissions (6704077) CVE-2008-3114 — Java Web Start, untrusted application may determine Cache Location (6704074)

🎯 Affected products5

  • Red Hat Satellite 5.1 (RHEL v.4 AS)
  • java-1.5.0-ibm-1:1.5.0.8-1jpp.1.el4.s390 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)
  • java-1.5.0-ibm-1:1.5.0.8-1jpp.1.el4.s390x as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)
  • java-1.5.0-ibm-devel-1:1.5.0.8-1jpp.1.el4.s390 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)
  • java-1.5.0-ibm-devel-1:1.5.0.8-1jpp.1.el4.s390x as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)

✅ Remediation

Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188

🔗 References (17)