- Vulnerability/
- RHSA-2012:0034
RHSA-2012:0034: Critical: java-1.6.0-ibm security update
First published: Wed Jan 18 2012(Updated: )
The IBM Java SE version 6 release includes the IBM Java 6 Runtime<br>Environment and the IBM Java 6 Software Development Kit.<br>This update fixes several vulnerabilities in the IBM Java 6 Runtime<br>Environment and the IBM Java 6 Software Development Kit. Detailed<br>vulnerability descriptions are linked from the IBM "Security alerts" page,<br>listed in the References section. (CVE-2011-3389, CVE-2011-3516,<br>CVE-2011-3521, CVE-2011-3544, CVE-2011-3545, CVE-2011-3546, CVE-2011-3547,<br>CVE-2011-3548, CVE-2011-3549, CVE-2011-3550, CVE-2011-3551, CVE-2011-3552,<br>CVE-2011-3553, CVE-2011-3554, CVE-2011-3556, CVE-2011-3557, CVE-2011-3560,<br>CVE-2011-3561)<br>All users of java-1.6.0-ibm are advised to upgrade to these updated<br>packages, containing the IBM Java 6 SR10 release. All running instances<br>of IBM Java must be restarted for the update to take effect.<br>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/java | <1.6.0-ibm-1.6.0.10.0-1jpp.2.el6 | 1.6.0-ibm-1.6.0.10.0-1jpp.2.el6 |
| redhat/java | <1.6.0-ibm-demo-1.6.0.10.0-1jpp.2.el6 | 1.6.0-ibm-demo-1.6.0.10.0-1jpp.2.el6 |
| redhat/java | <1.6.0-ibm-devel-1.6.0.10.0-1jpp.2.el6 | 1.6.0-ibm-devel-1.6.0.10.0-1jpp.2.el6 |
| redhat/java | <1.6.0-ibm-devel-1.6.0.10.0-1jpp.2.el6 | 1.6.0-ibm-devel-1.6.0.10.0-1jpp.2.el6 |
| redhat/java | <1.6.0-ibm-javacomm-1.6.0.10.0-1jpp.2.el6 | 1.6.0-ibm-javacomm-1.6.0.10.0-1jpp.2.el6 |
| redhat/java | <1.6.0-ibm-jdbc-1.6.0.10.0-1jpp.2.el6 | 1.6.0-ibm-jdbc-1.6.0.10.0-1jpp.2.el6 |
| redhat/java | <1.6.0-ibm-plugin-1.6.0.10.0-1jpp.2.el6 | 1.6.0-ibm-plugin-1.6.0.10.0-1jpp.2.el6 |
| redhat/java | <1.6.0-ibm-src-1.6.0.10.0-1jpp.2.el6 | 1.6.0-ibm-src-1.6.0.10.0-1jpp.2.el6 |
| redhat/java | <1.6.0-ibm-1.6.0.10.0-1jpp.2.el6 | 1.6.0-ibm-1.6.0.10.0-1jpp.2.el6 |
| redhat/java | <1.6.0-ibm-demo-1.6.0.10.0-1jpp.2.el6 | 1.6.0-ibm-demo-1.6.0.10.0-1jpp.2.el6 |
| redhat/java | <1.6.0-ibm-javacomm-1.6.0.10.0-1jpp.2.el6 | 1.6.0-ibm-javacomm-1.6.0.10.0-1jpp.2.el6 |
| redhat/java | <1.6.0-ibm-jdbc-1.6.0.10.0-1jpp.2.el6 | 1.6.0-ibm-jdbc-1.6.0.10.0-1jpp.2.el6 |
| redhat/java | <1.6.0-ibm-plugin-1.6.0.10.0-1jpp.2.el6 | 1.6.0-ibm-plugin-1.6.0.10.0-1jpp.2.el6 |
| redhat/java | <1.6.0-ibm-src-1.6.0.10.0-1jpp.2.el6 | 1.6.0-ibm-src-1.6.0.10.0-1jpp.2.el6 |
| redhat/java | <1.6.0-ibm-1.6.0.10.0-1jpp.2.el5 | 1.6.0-ibm-1.6.0.10.0-1jpp.2.el5 |
| redhat/java | <1.6.0-ibm-1.6.0.10.0-1jpp.2.el5 | 1.6.0-ibm-1.6.0.10.0-1jpp.2.el5 |
| redhat/java | <1.6.0-ibm-accessibility-1.6.0.10.0-1jpp.2.el5 | 1.6.0-ibm-accessibility-1.6.0.10.0-1jpp.2.el5 |
| redhat/java | <1.6.0-ibm-demo-1.6.0.10.0-1jpp.2.el5 | 1.6.0-ibm-demo-1.6.0.10.0-1jpp.2.el5 |
| redhat/java | <1.6.0-ibm-demo-1.6.0.10.0-1jpp.2.el5 | 1.6.0-ibm-demo-1.6.0.10.0-1jpp.2.el5 |
| redhat/java | <1.6.0-ibm-devel-1.6.0.10.0-1jpp.2.el5 | 1.6.0-ibm-devel-1.6.0.10.0-1jpp.2.el5 |
| redhat/java | <1.6.0-ibm-devel-1.6.0.10.0-1jpp.2.el5 | 1.6.0-ibm-devel-1.6.0.10.0-1jpp.2.el5 |
| redhat/java | <1.6.0-ibm-javacomm-1.6.0.10.0-1jpp.2.el5 | 1.6.0-ibm-javacomm-1.6.0.10.0-1jpp.2.el5 |
| redhat/java | <1.6.0-ibm-javacomm-1.6.0.10.0-1jpp.2.el5 | 1.6.0-ibm-javacomm-1.6.0.10.0-1jpp.2.el5 |
| redhat/java | <1.6.0-ibm-jdbc-1.6.0.10.0-1jpp.2.el5 | 1.6.0-ibm-jdbc-1.6.0.10.0-1jpp.2.el5 |
| redhat/java | <1.6.0-ibm-jdbc-1.6.0.10.0-1jpp.2.el5 | 1.6.0-ibm-jdbc-1.6.0.10.0-1jpp.2.el5 |
| redhat/java | <1.6.0-ibm-plugin-1.6.0.10.0-1jpp.2.el5 | 1.6.0-ibm-plugin-1.6.0.10.0-1jpp.2.el5 |
| redhat/java | <1.6.0-ibm-plugin-1.6.0.10.0-1jpp.2.el5 | 1.6.0-ibm-plugin-1.6.0.10.0-1jpp.2.el5 |
| redhat/java | <1.6.0-ibm-src-1.6.0.10.0-1jpp.2.el5 | 1.6.0-ibm-src-1.6.0.10.0-1jpp.2.el5 |
| redhat/java | <1.6.0-ibm-src-1.6.0.10.0-1jpp.2.el5 | 1.6.0-ibm-src-1.6.0.10.0-1jpp.2.el5 |
| redhat/java | <1.6.0-ibm-accessibility-1.6.0.10.0-1jpp.2.el5 | 1.6.0-ibm-accessibility-1.6.0.10.0-1jpp.2.el5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=737506
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=745379
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=745387
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=745391
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=745397
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=745399
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=745442
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=745447
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=745459
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=745464
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=745473
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=745476
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=747191
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=747198
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=747200
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=747203
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=747205
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=747208
- https://access.redhat.com/security/updates/classification/#critical
- http://www.ibm.com/developerworks/java/jdk/alerts/
- https://access.redhat.com/errata/RHSA-2012:0034 (Advisory)
Frequently Asked Questions
What is the severity of RHSA-2012:0034?
The severity of RHSA-2012:0034 is classified as important, indicating that the vulnerabilities addressed could lead to significant risks if left unpatched.
How do I fix RHSA-2012:0034?
To fix RHSA-2012:0034, you should update the IBM Java SE packages to 1.6.0-ibm-1.6.0.10.0-1jpp.2.el6 or later.
What vulnerabilities are addressed in RHSA-2012:0034?
RHSA-2012:0034 addresses multiple vulnerabilities in the IBM Java 6 Runtime Environment and Software Development Kit that could allow remote code execution.
Which versions of IBM Java are affected according to RHSA-2012:0034?
Versions of IBM Java 6 prior to 1.6.0-ibm-1.6.0.10.0-1jpp.2.el6 are affected by the vulnerabilities outlined in RHSA-2012:0034.
Is a reboot required after applying the fix for RHSA-2012:0034?
In most cases, a reboot may not be required, but it is recommended to restart any application servers or services that utilize IBM Java after applying the update.
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- collector/redhat-errata
- anchor-id/RHSA-2012:0034
- package-manager/redhat