RHSA-2010:0043Low

Red Hat Security Advisory: Red Hat Network Satellite Server IBM Java Runtime security update

Published
January 14, 2010
Last Modified
June 28, 2026

🔗 CVE IDs covered (35)

CVE-2009-0217 →CVE-2009-1093 →CVE-2009-1094 →CVE-2009-1095 →CVE-2009-1096 →CVE-2009-1097 →CVE-2009-1098 →CVE-2009-1099 →CVE-2009-1100 →CVE-2009-1101 →CVE-2009-1103 →CVE-2009-1104 →CVE-2009-1105 →CVE-2009-1106 →CVE-2009-1107 →CVE-2009-2625 →CVE-2009-2670 →CVE-2009-2671 →CVE-2009-2672 →CVE-2009-2673 →CVE-2009-2674 →CVE-2009-2675 →CVE-2009-2676 →CVE-2009-3865 →CVE-2009-3866 →CVE-2009-3867 →CVE-2009-3868 →CVE-2009-3869 →CVE-2009-3871 →CVE-2009-3872 →CVE-2009-3873 →CVE-2009-3874 →CVE-2009-3875 →CVE-2009-3876 →CVE-2009-3877 →

📋 Description

CVE-2009-0217 — xml-security-1.3.0-1jpp.ep1.*: XMLDsig HMAC-based signatures spoofing and authentication bypass CVE-2009-1093 — OpenJDK remote LDAP Denial-Of-Service (6717680) CVE-2009-1094 — OpenJDK LDAP client remote code execution (6737315) CVE-2009-1095 — OpenJDK Pack200 Buffer overflow vulnerability (6792554) CVE-2009-1096 — OpenJDK Pack200 Buffer overflow vulnerability (6792554) CVE-2009-1097 — OpenJDK: PNG and GIF processing buffer overflow vulnerabilities (6804996, 6804997) CVE-2009-1098 — OpenJDK GIF processing buffer overflow vulnerability (6804998) CVE-2009-1099 — OpenJDK: Type1 font processing buffer overflow vulnerability CVE-2009-1100 — OpenJDK: DoS (disk consumption) via handling of temporary font files CVE-2009-1101 — OpenJDK JAX-WS service endpoint remote Denial-of-Service (6630639) CVE-2009-1103 — OpenJDK: Files disclosure, arbitrary code execution via "deserializing applets" (6646860) CVE-2009-1104 — OpenJDK: Intended access restrictions bypass via LiveConnect (6724331) CVE-2009-1105 — OpenJDK: Possibility of trusted applet run in older, vulnerable version of JRE (6706490) CVE-2009-1106 — OpenJDK: Improper parsing of crossdomain.xml files (intended access restriction bypass) (6798948) CVE-2009-1107 — OpenJDK: Signed applet remote misuse possibility (6782871) CVE-2009-2625 — JDK: XML parsing Denial-Of-Service (6845701) CVE-2009-2670 — OpenJDK Untrusted applet System properties access (6738524) CVE-2009-2671 — OpenJDK Proxy mechanism information leaks (6801071) CVE-2009-2672 — OpenJDK Proxy mechanism information leaks (6801071) CVE-2009-2673 — OpenJDK proxy mechanism allows non-authorized socket connections (6801497) CVE-2009-2674 — Java Web Start Buffer JPEG processing integer overflow (6823373) CVE-2009-2675 — Java Web Start Buffer unpack200 processing integer overflow (6830335) CVE-2009-2676 — JRE applet launcher vulnerability CVE-2009-3865 — java-1.6.0-sun: ACE in JRE Deployment Toolkit (6869752) CVE-2009-3866 — java-1.6.0-sun: Privilege escalation in the Java Web Start Installer (6872824) CVE-2009-3867 — java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303) CVE-2009-3868 — java-1.6.0-sun: Privilege escalation via crafted image file due improper color profiles parsing (6862970) CVE-2009-3869 — OpenJDK JRE AWT setDifflCM stack overflow (6872357) CVE-2009-3871 — OpenJDK JRE AWT setBytePixels heap overflow (6872358) CVE-2009-3872 — JRE JPEG JFIF Decoder issue (6862969) CVE-2009-3873 — OpenJDK JPEG Image Writer quantization problem (6862968) CVE-2009-3874 — OpenJDK ImageI/O JPEG heap overflow (6874643) CVE-2009-3875 — OpenJDK MessageDigest.isEqual introduces timing attack vulnerabilities (6863503) CVE-2009-3876 — OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877 CVE-2009-3877 — OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877

🎯 Affected products18

  • Red Hat Satellite 5.3 (RHEL v.4)
  • Red Hat Satellite 5.3 (RHEL v.5)
  • java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5.i386 as a component of Red Hat Satellite 5.3 (RHEL v.5)
  • java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5.s390x as a component of Red Hat Satellite 5.3 (RHEL v.5)
  • java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5.src as a component of Red Hat Satellite 5.3 (RHEL v.5)
  • java-1.6.0-ibm-1:1.6.0.7-1jpp.2.el5.x86_64 as a component of Red Hat Satellite 5.3 (RHEL v.5)
  • java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4.i386 as a component of Red Hat Satellite 5.3 (RHEL v.4)
  • java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4.s390 as a component of Red Hat Satellite 5.3 (RHEL v.4)
  • java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4.s390x as a component of Red Hat Satellite 5.3 (RHEL v.4)
  • java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4.src as a component of Red Hat Satellite 5.3 (RHEL v.4)
  • java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4.x86_64 as a component of Red Hat Satellite 5.3 (RHEL v.4)
  • java-1.6.0-ibm-devel-1:1.6.0.7-1jpp.2.el5.i386 as a component of Red Hat Satellite 5.3 (RHEL v.5)
  • java-1.6.0-ibm-devel-1:1.6.0.7-1jpp.2.el5.s390x as a component of Red Hat Satellite 5.3 (RHEL v.5)
  • java-1.6.0-ibm-devel-1:1.6.0.7-1jpp.2.el5.x86_64 as a component of Red Hat Satellite 5.3 (RHEL v.5)
  • java-1.6.0-ibm-devel-1:1.6.0.7-1jpp.3.el4.i386 as a component of Red Hat Satellite 5.3 (RHEL v.4)
  • java-1.6.0-ibm-devel-1:1.6.0.7-1jpp.3.el4.s390 as a component of Red Hat Satellite 5.3 (RHEL v.4)
  • java-1.6.0-ibm-devel-1:1.6.0.7-1jpp.3.el4.s390x as a component of Red Hat Satellite 5.3 (RHEL v.4)
  • java-1.6.0-ibm-devel-1:1.6.0.7-1jpp.3.el4.x86_64 as a component of Red Hat Satellite 5.3 (RHEL v.4)

✅ Remediation

Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

🔗 References (35)