RHSA-2009:0466Low

Red Hat Security Advisory: java-1.5.0-ibm security update

Published
May 7, 2009
Last Modified
November 7, 2026

🔗 CVE IDs covered (14)

CVE-2008-3103 →CVE-2008-5345 →CVE-2008-5346 →CVE-2008-5348 →CVE-2008-5349 →CVE-2008-5350 →CVE-2008-5351 →CVE-2008-5352 →CVE-2008-5353 →CVE-2008-5354 →CVE-2008-5356 →CVE-2008-5357 →CVE-2008-5359 →CVE-2008-5360 →

📋 Description

CVE-2008-3103 — OpenJDK JMX allows illegal operations with local monitoring (6332953) CVE-2008-5345 — JRE allows unauthorized file access and connections to localhost CVE-2008-5346 — JRE allows unauthorized memory read access via a crafted ZIP file CVE-2008-5348 — OpenJDK Denial-Of-Service in kerberos authentication (6588160) CVE-2008-5349 — OpenJDK RSA public key length denial-of-service (6497740) CVE-2008-5350 — OpenJDK allows to list files within the user home directory (6484091) CVE-2008-5351 — OpenJDK UTF-8 decoder accepts non-shortest form sequences (4486841) CVE-2008-5352 — OpenJDK Jar200 Decompression buffer overflow (6755943) CVE-2008-5353 — OpenJDK calendar object deserialization allows privilege escalation (6734167) CVE-2008-5354 — OpenJDK Privilege escalation in command line applications (6733959) CVE-2008-5356 — OpenJDK Font processing vulnerability (6733336) CVE-2008-5357 — OpenJDK Truetype Font processing vulnerability (6751322) CVE-2008-5359 — OpenJDK Buffer overflow in image processing (6726779) CVE-2008-5360 — OpenJDK temporary files have guessable file names (6721753)

🎯 Affected products18

  • Red Hat Satellite 5.2 (RHEL v.4 AS)
  • Red Hat Satellite 5.2 (RHEL v.5)
  • java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386 as a component of Red Hat Satellite 5.2 (RHEL v.5)
  • java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x as a component of Red Hat Satellite 5.2 (RHEL v.5)
  • java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src as a component of Red Hat Satellite 5.2 (RHEL v.5)
  • java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64 as a component of Red Hat Satellite 5.2 (RHEL v.5)
  • java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386 as a component of Red Hat Satellite 5.2 (RHEL v.4 AS)
  • java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390 as a component of Red Hat Satellite 5.2 (RHEL v.4 AS)
  • java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x as a component of Red Hat Satellite 5.2 (RHEL v.4 AS)
  • java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src as a component of Red Hat Satellite 5.2 (RHEL v.4 AS)
  • java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64 as a component of Red Hat Satellite 5.2 (RHEL v.4 AS)
  • java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386 as a component of Red Hat Satellite 5.2 (RHEL v.5)
  • java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x as a component of Red Hat Satellite 5.2 (RHEL v.5)
  • java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64 as a component of Red Hat Satellite 5.2 (RHEL v.5)
  • java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386 as a component of Red Hat Satellite 5.2 (RHEL v.4 AS)
  • java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390 as a component of Red Hat Satellite 5.2 (RHEL v.4 AS)
  • java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x as a component of Red Hat Satellite 5.2 (RHEL v.4 AS)
  • java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64 as a component of Red Hat Satellite 5.2 (RHEL v.4 AS)

✅ Remediation

Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

🔗 References (18)