RHSA-2013:1456Low

Red Hat Security Advisory: Red Hat Network Satellite server IBM Java Runtime security update

Published
October 23, 2013
Last Modified
November 7, 2026

🔗 CVE IDs covered (118)

CVE-2012-0547 →CVE-2012-0551 →CVE-2012-1531 →CVE-2012-1532 →CVE-2012-1533 →CVE-2012-1541 →CVE-2012-1682 →CVE-2012-1713 →CVE-2012-1716 →CVE-2012-1717 →CVE-2012-1718 →CVE-2012-1719 →CVE-2012-1721 →CVE-2012-1722 →CVE-2012-1725 →CVE-2012-3143 →CVE-2012-3159 →CVE-2012-3213 →CVE-2012-3216 →CVE-2012-3342 →CVE-2012-4820 →CVE-2012-4822 →CVE-2012-4823 →CVE-2012-5068 →CVE-2012-5069 →CVE-2012-5071 →CVE-2012-5072 →CVE-2012-5073 →CVE-2012-5075 →CVE-2012-5079 →CVE-2012-5081 →CVE-2012-5083 →CVE-2012-5084 →CVE-2012-5089 →CVE-2013-0169 →CVE-2013-0351 →CVE-2013-0401 →CVE-2013-0409 →CVE-2013-0419 →CVE-2013-0423 →CVE-2013-0424 →CVE-2013-0425 →CVE-2013-0426 →CVE-2013-0427 →CVE-2013-0428 →CVE-2013-0432 →CVE-2013-0433 →CVE-2013-0434 →CVE-2013-0435 →CVE-2013-0438 →CVE-2013-0440 →CVE-2013-0441 →CVE-2013-0442 →CVE-2013-0443 →CVE-2013-0445 →CVE-2013-0446 →CVE-2013-0450 →CVE-2013-0809 →CVE-2013-1473 →CVE-2013-1476 →CVE-2013-1478 →CVE-2013-1480 →CVE-2013-1481 →CVE-2013-1486 →CVE-2013-1487 →CVE-2013-1491 →CVE-2013-1493 →CVE-2013-1500 →CVE-2013-1537 →CVE-2013-1540 →CVE-2013-1557 →CVE-2013-1563 →CVE-2013-1569 →CVE-2013-1571 →CVE-2013-2383 →CVE-2013-2384 →CVE-2013-2394 →CVE-2013-2407 →CVE-2013-2412 →CVE-2013-2417 →CVE-2013-2418 →CVE-2013-2419 →CVE-2013-2420 →CVE-2013-2422 →CVE-2013-2424 →CVE-2013-2429 →CVE-2013-2430 →CVE-2013-2432 →CVE-2013-2433 →CVE-2013-2435 →CVE-2013-2437 →CVE-2013-2440 →CVE-2013-2442 →CVE-2013-2443 →CVE-2013-2444 →CVE-2013-2446 →CVE-2013-2447 →CVE-2013-2448 →CVE-2013-2450 →CVE-2013-2451 →CVE-2013-2452 →CVE-2013-2453 →CVE-2013-2454 →CVE-2013-2455 →CVE-2013-2456 →CVE-2013-2457 →CVE-2013-2459 →CVE-2013-2463 →CVE-2013-2464 →CVE-2013-2465 →CVE-2013-2466 →CVE-2013-2468 →CVE-2013-2469 →CVE-2013-2470 →CVE-2013-2471 →CVE-2013-2472 →CVE-2013-2473 →CVE-2013-3743 →

📋 Description

CVE-2012-0547 — OpenJDK: AWT hardening fixes (AWT, 7163201) CVE-2012-0551 — JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment) CVE-2012-1531 — JDK: unspecified vulnerability (2D) CVE-2012-1532 — JDK: unspecified vulnerability (Deployment) CVE-2012-1533 — JDK: unspecified vulnerability (Deployment) CVE-2012-1541 — JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment) CVE-2012-1682 — OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476) CVE-2012-1713 — OpenJDK: fontmanager layout lookup code memory corruption (2D, 7143617) CVE-2012-1716 — OpenJDK: SynthLookAndFeel application context bypass (Swing, 7143614) CVE-2012-1717 — OpenJDK: insecure temporary file permissions (JRE, 7143606) CVE-2012-1718 — OpenJDK: CRL and certificate extensions handling improvements (Security, 7143872) CVE-2012-1719 — OpenJDK: mutable repository identifiers in generated stub code (CORBA, 7143851) CVE-2012-1721 — JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment) CVE-2012-1722 — JDK: unspecified vulnerability fixed in 6u33 and 7u5 (Deployment) CVE-2012-1725 — OpenJDK: insufficient invokespecial verification (HotSpot, 7160757) CVE-2012-3143 — JDK: unspecified vulnerability (JMX) CVE-2012-3159 — JDK: unspecified vulnerability (Deployment) CVE-2012-3213 — JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Scripting) CVE-2012-3216 — OpenJDK: java.io.FilePermission information leak (Libraries, 6631398) CVE-2012-3342 — JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment) CVE-2012-4820 — JDK: java.lang.reflect.Method invoke() code execution CVE-2012-4822 — JDK: java.lang.class code execution CVE-2012-4823 — JDK: java.lang.ClassLoder defineClass() code execution CVE-2012-5068 — OpenJDK: RhinoScriptEngine security bypass (Scripting, 7143535) CVE-2012-5069 — OpenJDK: Executors state handling issues (Concurrency, 7189103) CVE-2012-5071 — OpenJDK: DescriptorSupport insufficient package access checks (JMX, 7192975) CVE-2012-5072 — OpenJDK: AccessController.doPrivilegedWithCombiner() information disclosure (Security, 7172522) CVE-2012-5073 — OpenJDK: LogManager security bypass (Libraries, 7169884) CVE-2012-5075 — OpenJDK: RMIConnectionImpl information disclosure (JMX, 7169888) CVE-2012-5079 — OpenJDK: ServiceLoader reject not subtype classes without instantiating (Libraries, 7195919) CVE-2012-5081 — OpenJDK: JSSE denial of service (JSSE, 7186286) CVE-2012-5083 — JDK: unspecified vulnerability (2D) CVE-2012-5084 — OpenJDK: DefaultFormatter insufficient data validation (Swing, 7195194) CVE-2012-5089 — OpenJDK: RMIConnectionImpl insufficient access control checks (JMX, 7198296) CVE-2013-0169 — SSL/TLS: CBC padding timing attack (lucky-13) CVE-2013-0351 — JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment) CVE-2013-0401 — OpenJDK: sun.awt.datatransfer.ClassLoaderObjectInputStream class may incorrectly invoke the system class loader (CanSecWest 2013, AWT, 8009305) CVE-2013-0409 — JDK: unspecified vulnerability fixed in 6u39 and 7u13 (JMX) CVE-2013-0419 — JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment) CVE-2013-0423 — JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment) CVE-2013-0424 — OpenJDK: RMI CGIHandler XSS issue (RMI, 6563318) CVE-2013-0425 — OpenJDK: logging insufficient access control checks (Libraries, 6664509) CVE-2013-0426 — OpenJDK: logging insufficient access control checks (Libraries, 6664528) CVE-2013-0427 — OpenJDK: invalid threads subject to interrupts (Libraries, 6776941) CVE-2013-0428 — OpenJDK: reflection API incorrect checks for proxy classes (Libraries, 7197546, SE-2012-01 Issue 29) CVE-2013-0432 — OpenJDK: insufficient clipboard access premission checks (AWT, 7186952) CVE-2013-0433 — OpenJDK: InetSocketAddress serialization issue (Networking, 7201071) CVE-2013-0434 — OpenJDK: loadPropertyFile missing restrictions (JAXP, 8001235) CVE-2013-0435 — OpenJDK: com.sun.xml.internal.* not restricted packages (JAX-WS, 7201068) CVE-2013-0438 — JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment) CVE-2013-0440 — OpenJDK: CPU consumption DoS via repeated SSL ClientHello packets (JSSE, 7192393) CVE-2013-0441 — OpenJDK: missing serialization restriction (CORBA, 7201066) CVE-2013-0442 — OpenJDK: insufficient privilege checking issue (AWT, 7192977) CVE-2013-0443 — OpenJDK: insufficient Diffie-Hellman public key checks (JSSE, 7192392) CVE-2013-0445 — OpenJDK: insufficient privilege checking issue (AWT, 8001057) CVE-2013-0446 — JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment) CVE-2013-0450 — OpenJDK: RequiredModelMBean missing access control context checks (JMX, 8000537) CVE-2013-0809 — OpenJDK: Specially crafted sample model integer overflow (2D, 8007014) CVE-2013-1473 — JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment) CVE-2013-1476 — OpenJDK: missing ValueHandlerImpl class constructor access restriction (CORBA, 8000631) CVE-2013-1478 — OpenJDK: image parser insufficient raster parameter checks (2D, 8001972) CVE-2013-1480 — OpenJDK: image parser insufficient raster parameter checks (AWT, 8002325) CVE-2013-1481 — JDK: unspecified vulnerability fixed in 6u39 (Sound) CVE-2013-1486 — OpenJDK: MBeanServer insufficient privilege restrictions (JMX, 8006446) CVE-2013-1487 — JDK: unspecified vulnerability fixed in 6u41 and 7u15 (Deployment) CVE-2013-1491 — JDK: unspecified sanbox bypass (CanSecWest 2013, 2D) CVE-2013-1493 — OpenJDK: CMM malformed raster memory corruption (2D, 8007675) CVE-2013-1500 — OpenJDK: Insecure shared memory permissions (2D, 8001034) CVE-2013-1537 — OpenJDK: remote code loading enabled by default (RMI, 8001040) CVE-2013-1540 — JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment) CVE-2013-1557 — OpenJDK: LogStream.setDefaultStream() missing security restrictions (RMI, 8001329) CVE-2013-1563 — JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Install) CVE-2013-1569 — ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004994) CVE-2013-1571 — OpenJDK: Frame injection in generated HTML (Javadoc, 8012375) CVE-2013-2383 — ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004986) CVE-2013-2384 — ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004987) CVE-2013-2394 — JDK: unspecified vulnerability fixed in 7u21 and 6u45 (2D) CVE-2013-2407 — OpenJDK: Integrate Apache Santuario, rework class loader (Libraries, 6741606, 8008744) CVE-2013-2412 — OpenJDK: JConsole SSL support (Serviceability, 8003703) CVE-2013-2417 — OpenJDK: Network InetAddress serialization information disclosure (Networking, 8000724) CVE-2013-2418 — JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment) CVE-2013-2419 — ICU: Layout Engine font processing errors (JDK 2D, 8001031) CVE-2013-2420 — OpenJDK: image processing vulnerability (2D, 8007617) CVE-2013-2422 — OpenJDK: MethodUtil trampoline class incorrect restrictions (Libraries, 8009857) CVE-2013-2424 — OpenJDK: MBeanInstantiator insufficient class access checks (JMX, 8006435) CVE-2013-2429 — OpenJDK: JPEGImageWriter state corruption (ImageIO, 8007918) CVE-2013-2430 — OpenJDK: JPEGImageReader state corruption (ImageIO, 8007667) CVE-2013-2432 — JDK: unspecified vulnerability fixed in 7u21 and 6u45 (2D) CVE-2013-2433 — JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment) CVE-2013-2435 — JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment) CVE-2013-2437 — JDK: unspecified vulnerability fixed in 7u25 (Deployment) CVE-2013-2440 — JDK: unspecified vulnerability fixed in 7u21 and 6u45 (Deployment) CVE-2013-2442 — JDK: unspecified vulnerability fixed in 7u25 (Deployment) CVE-2013-2443 — OpenJDK: AccessControlContext check order issue (Libraries, 8001330) CVE-2013-2444 — OpenJDK: Resource denial of service (AWT, 8001038) CVE-2013-2446 — OpenJDK: output stream access restrictions (CORBA, 8000642) CVE-2013-2447 — OpenJDK: Prevent revealing the local address (Networking, 8001318) CVE-2013-2448 — OpenJDK: Better access restrictions (Sound, 8006328) CVE-2013-2450 — OpenJDK: ObjectStreamClass circular reference denial of service (Serialization, 8000638) CVE-2013-2451 — OpenJDK: exclusive port binding (Networking, 7170730) CVE-2013-2452 — OpenJDK: Unique VMIDs (Libraries, 8001033) CVE-2013-2453 — OpenJDK: MBeanServer Introspector package access (JMX, 8008124) CVE-2013-2454 — OpenJDK: SerialJavaObject package restriction (JDBC, 8009554) CVE-2013-2455 — OpenJDK: getEnclosing* checks (Libraries, 8007812) CVE-2013-2456 — OpenJDK: ObjectOutputStream access checks (Serialization, 8008132) CVE-2013-2457 — OpenJDK: Proper class checking (JMX, 8008120) CVE-2013-2459 — OpenJDK: Various AWT integer overflow checks (AWT, 8009071) CVE-2013-2463 — OpenJDK: Incorrect image attribute verification (2D, 8012438) CVE-2013-2464 — JDK: unspecified vulnerability fixed in 7u25 (2D) CVE-2013-2465 — OpenJDK: Incorrect image channel verification (2D, 8012597) CVE-2013-2466 — JDK: unspecified vulnerability fixed in 7u25 (Deployment) CVE-2013-2468 — JDK: unspecified vulnerability fixed in 7u25 (Deployment) CVE-2013-2469 — OpenJDK: Incorrect image layout verification (2D, 8012601) CVE-2013-2470 — OpenJDK: ImagingLib byte lookup processing (2D, 8011243) CVE-2013-2471 — OpenJDK: Incorrect IntegerComponentRaster size checks (2D, 8011248) CVE-2013-2472 — OpenJDK: Incorrect ShortBandedRaster size checks (2D, 8011253) CVE-2013-2473 — OpenJDK: Incorrect ByteBandedRaster size checks (2D, 8011257) CVE-2013-3743 — JDK: unspecified vulnerability fixed in 6u51 and 5u51 (AWT)

🎯 Affected products12

  • Red Hat Satellite 5.5 (RHEL v.5)
  • Red Hat Satellite 5.5 (RHEL v.6)
  • java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9.s390x as a component of Red Hat Satellite 5.5 (RHEL v.5)
  • java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9.src as a component of Red Hat Satellite 5.5 (RHEL v.5)
  • java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9.x86_64 as a component of Red Hat Satellite 5.5 (RHEL v.5)
  • java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4.s390x as a component of Red Hat Satellite 5.5 (RHEL v.6)
  • java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4.src as a component of Red Hat Satellite 5.5 (RHEL v.6)
  • java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4.x86_64 as a component of Red Hat Satellite 5.5 (RHEL v.6)
  • java-1.6.0-ibm-devel-1:1.6.0.14.0-1jpp.1.el5_9.s390x as a component of Red Hat Satellite 5.5 (RHEL v.5)
  • java-1.6.0-ibm-devel-1:1.6.0.14.0-1jpp.1.el5_9.x86_64 as a component of Red Hat Satellite 5.5 (RHEL v.5)
  • java-1.6.0-ibm-devel-1:1.6.0.14.0-1jpp.1.el6_4.s390x as a component of Red Hat Satellite 5.5 (RHEL v.6)
  • java-1.6.0-ibm-devel-1:1.6.0.14.0-1jpp.1.el6_4.x86_64 as a component of Red Hat Satellite 5.5 (RHEL v.6)

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 Workaround: On OpenShift Container Platform 3.11 it's possible to edit the list of cipher suites offered by the router when performing 'edge', or 're-encrypt' TLS modes. Please follow the documentation [1], and [2] to remove the vulnerable CBC ciphers use the modern, or intermediate cipher suites outlined by Mozilla instead [3]. In 'passthrough' mode TLS termination occurs in the application so that is another way to mitigate the vulnerability. [1] https://docs.openshift.com/container-platform/3.11/install_config/router/customized_haproxy_router.html#obtaining-router-configuration-template [2] https://docs.openshift.com/container-platform/3.11/install_config/router/customized_haproxy_router.html#using-configmap-replace-template [3] https://wiki.mozilla.org/Security/Server_Side_TLS

🔗 References (121)