Red Hat Security Advisory: Red Hat Network Satellite server IBM Java Runtime security update

CVE-2013-3829 — OpenJDK: java.util.TimeZone does not restrict setting of default time zone (Libraries, 8001029) CVE-2013-4041 — JDK: unspecified sandbox bypass (JVM) CVE-2013-5372 — JDK: XML4J xml entity expansion excessive memory use (XML) CVE-2013-5375 — JDK: unspecified sandbox bypass (XML) CVE-2013-5457 — JDK: unspecified sandbox bypass (ORB) CVE-2013-5772 — OpenJDK: insufficient html escaping in jhat (jhat, 8011081) CVE-2013-5774 — OpenJDK: Inet6Address class IPv6 address processing errors (Libraries, 8015743) CVE-2013-5776 — JDK: unspecified vulnerability fixed in 7u45 (Deployment) CVE-2013-5778 — OpenJDK: image conversion out of bounds read (2D, 8014102) CVE-2013-5780 — OpenJDK: key data leak via toString() methods (Libraries, 8011071) CVE-2013-5782 — OpenJDK: Incorrect awt_getPixelByte/awt_getPixelShort/awt_setPixelByte/awt_setPixelShort image raster checks (2D, 8014093) CVE-2013-5783 — OpenJDK: JTable not properly performing certain access checks (Swing, 8013744) CVE-2013-5784 — OpenJDK: insufficient InterfaceImplementor security checks (Scripting, 8017299) CVE-2013-5787 — JDK: unspecified vulnerability fixed in 7u45 (Deployment) CVE-2013-5789 — JDK: unspecified vulnerability fixed in 7u45 (Deployment) CVE-2013-5797 — OpenJDK: insufficient escaping of window title string (Javadoc, 8016675) CVE-2013-5801 — JDK: unspecified vulnerability fixed in 7u45 (2D) CVE-2013-5802 — OpenJDK: javax.xml.transform.TransformerFactory does not properly honor XMLConstants.FEATURE_SECURE_PROCESSING (JAXP, 8012425) CVE-2013-5803 — OpenJDK: insufficient checks of KDC replies (JGSS, 8014341) CVE-2013-5804 — OpenJDK: javac does not ignore certain ignorable characters (Javadoc, 8016653) CVE-2013-5809 — OpenJDK: JPEGImageReader and JPEGImageWriter missing band size checks (2D, 8013510) CVE-2013-5812 — JDK: unspecified vulnerability fixed in 7u45 (Deployment) CVE-2013-5814 — OpenJDK: RMIConnection stub missing permission check (CORBA, 8011157) CVE-2013-5817 — OpenJDK: VersionHelper12 does not honor modifyThreadGroup restriction (JNDI, 8013739) CVE-2013-5818 — JDK: unspecified vulnerability fixed in 7u45 (Deployment) CVE-2013-5819 — JDK: unspecified vulnerability fixed in 7u45 (Deployment) CVE-2013-5820 — OpenJDK: insufficient security checks (JAXWS, 8017505) CVE-2013-5823 — OpenJDK: com.sun.org.apache.xml.internal.security.utils.UnsyncByteArrayOutputStream Denial of Service (Security, 8021290) CVE-2013-5824 — JDK: unspecified vulnerability fixed in 7u45 (Deployment) CVE-2013-5825 — OpenJDK: XML parsing Denial of Service (JAXP, 8014530) CVE-2013-5829 — OpenJDK: Java2d Disposer security bypass (2D, 8017287) CVE-2013-5830 — OpenJDK: checkPackageAccess missing security check (Libraries, 8017291) CVE-2013-5831 — JDK: unspecified vulnerability fixed in 7u45 (Deployment) CVE-2013-5832 — JDK: unspecified vulnerability fixed in 7u45 (Deployment) CVE-2013-5840 — OpenJDK: getDeclaringClass() information leak (Libraries, 8014349) CVE-2013-5842 — OpenJDK: ObjectInputStream/ObjectOutputStream missing checks (Libraries, 8014987) CVE-2013-5843 — JDK: unspecified vulnerability fixed in 7u45 (2D) CVE-2013-5848 — JDK: unspecified vulnerability fixed in 7u45 (Deployment) CVE-2013-5849 — OpenJDK: insufficient DataFlavor security checks (AWT, 8012277) CVE-2013-5850 — OpenJDK: Missing CORBA security checks (Libraries, 8017196) CVE-2013-5851 — OpenJDK: XML stream factory finder information leak (JAXP, 8013502)