RHSA-2008:1025Critical

Red Hat Security Advisory: java-1.5.0-sun security update

Published
December 4, 2008
Last Modified
November 7, 2026

🔗 CVE IDs covered (20)

CVE-2008-2086 →CVE-2008-5339 →CVE-2008-5340 →CVE-2008-5341 →CVE-2008-5342 →CVE-2008-5343 →CVE-2008-5344 →CVE-2008-5345 →CVE-2008-5346 →CVE-2008-5348 →CVE-2008-5349 →CVE-2008-5350 →CVE-2008-5351 →CVE-2008-5352 →CVE-2008-5353 →CVE-2008-5354 →CVE-2008-5356 →CVE-2008-5357 →CVE-2008-5359 →CVE-2008-5360 →

📋 Description

CVE-2008-2086 — Java Web Start File Inclusion via System Properties Override CVE-2008-5339 — JavaWebStart allows unauthorized network connections CVE-2008-5340 — Java WebStart privilege escalation CVE-2008-5341 — Java Web Start exposes username and the pathname of the JWS cache CVE-2008-5342 — Java Web Start BasicService displays local files in the browser CVE-2008-5343 — Java WebStart allows hidden code privilege escalation CVE-2008-5344 — Java WebStart unprivileged local file and network access CVE-2008-5345 — JRE allows unauthorized file access and connections to localhost CVE-2008-5346 — JRE allows unauthorized memory read access via a crafted ZIP file CVE-2008-5348 — OpenJDK Denial-Of-Service in kerberos authentication (6588160) CVE-2008-5349 — OpenJDK RSA public key length denial-of-service (6497740) CVE-2008-5350 — OpenJDK allows to list files within the user home directory (6484091) CVE-2008-5351 — OpenJDK UTF-8 decoder accepts non-shortest form sequences (4486841) CVE-2008-5352 — OpenJDK Jar200 Decompression buffer overflow (6755943) CVE-2008-5353 — OpenJDK calendar object deserialization allows privilege escalation (6734167) CVE-2008-5354 — OpenJDK Privilege escalation in command line applications (6733959) CVE-2008-5356 — OpenJDK Font processing vulnerability (6733336) CVE-2008-5357 — OpenJDK Truetype Font processing vulnerability (6751322) CVE-2008-5359 — OpenJDK Buffer overflow in image processing (6726779) CVE-2008-5360 — OpenJDK temporary files have guessable file names (6721753)

🎯 Affected products72

  • Red Hat Desktop version 4 Extras
  • Red Hat Enterprise Linux AS version 4 Extras
  • Red Hat Enterprise Linux Desktop Supplementary (v. 5)
  • Red Hat Enterprise Linux ES version 4 Extras
  • Red Hat Enterprise Linux Server Supplementary (v. 5)
  • Red Hat Enterprise Linux WS version 4 Extras
  • java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Desktop version 4 Extras
  • java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras
  • java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras
  • java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras
  • java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Desktop version 4 Extras
  • java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras
  • java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras
  • java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras
  • java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)
  • java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
  • java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)
  • java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
  • java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Desktop version 4 Extras
  • java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux AS version 4 Extras
  • java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux ES version 4 Extras
  • java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.i586 as a component of Red Hat Enterprise Linux WS version 4 Extras
  • java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Desktop version 4 Extras
  • java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4 Extras
  • java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4 Extras
  • java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4 Extras
  • java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)
  • java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.i586 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
  • java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)
  • java-1.5.0-sun-demo-0:1.5.0.17-1jpp.2.el5.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
  • +42 more not shown

✅ Remediation

Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188

🔗 References (5)