- Vulnerability/
- RHSA-2015:2507
RHSA-2015:2507: Critical: java-1.7.0-ibm security update
First published: Mon Nov 23 2015(Updated: )
IBM Java SE version 7 includes the IBM Java Runtime Environment and the IBM<br>Java Software Development Kit.<br>This update fixes several vulnerabilities in the IBM Java Runtime<br>Environment and the IBM Java Software Development Kit. Further information<br>about these flaws can be found on the IBM Java Security alerts page, listed<br>in the References section. (CVE-2015-4734, CVE-2015-4803, CVE-2015-4805,<br>CVE-2015-4806, CVE-2015-4810, CVE-2015-4835, CVE-2015-4840, CVE-2015-4842,<br>CVE-2015-4843, CVE-2015-4844, CVE-2015-4860, CVE-2015-4871, CVE-2015-4872,<br>CVE-2015-4882, CVE-2015-4883, CVE-2015-4893, CVE-2015-4902, CVE-2015-4903,<br>CVE-2015-5006)<br>Red Hat would like to thank Andrea Palazzo of Truel IT for reporting the<br>CVE-2015-4806 issue.<br>All users of java-1.7.0-ibm are advised to upgrade to these updated<br>packages, containing the IBM Java SE 7 SR9-FP20 release. All running<br>instances of IBM Java must be restarted for the update to take effect.<br>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/java | <1.7.0-ibm-1.7.0.9.20-1jpp.1.el5 | 1.7.0-ibm-1.7.0.9.20-1jpp.1.el5 |
| redhat/java | <1.7.0-ibm-1.7.0.9.20-1jpp.1.el5 | 1.7.0-ibm-1.7.0.9.20-1jpp.1.el5 |
| redhat/java | <1.7.0-ibm-demo-1.7.0.9.20-1jpp.1.el5 | 1.7.0-ibm-demo-1.7.0.9.20-1jpp.1.el5 |
| redhat/java | <1.7.0-ibm-demo-1.7.0.9.20-1jpp.1.el5 | 1.7.0-ibm-demo-1.7.0.9.20-1jpp.1.el5 |
| redhat/java | <1.7.0-ibm-devel-1.7.0.9.20-1jpp.1.el5 | 1.7.0-ibm-devel-1.7.0.9.20-1jpp.1.el5 |
| redhat/java | <1.7.0-ibm-devel-1.7.0.9.20-1jpp.1.el5 | 1.7.0-ibm-devel-1.7.0.9.20-1jpp.1.el5 |
| redhat/java | <1.7.0-ibm-jdbc-1.7.0.9.20-1jpp.1.el5 | 1.7.0-ibm-jdbc-1.7.0.9.20-1jpp.1.el5 |
| redhat/java | <1.7.0-ibm-jdbc-1.7.0.9.20-1jpp.1.el5 | 1.7.0-ibm-jdbc-1.7.0.9.20-1jpp.1.el5 |
| redhat/java | <1.7.0-ibm-plugin-1.7.0.9.20-1jpp.1.el5 | 1.7.0-ibm-plugin-1.7.0.9.20-1jpp.1.el5 |
| redhat/java | <1.7.0-ibm-plugin-1.7.0.9.20-1jpp.1.el5 | 1.7.0-ibm-plugin-1.7.0.9.20-1jpp.1.el5 |
| redhat/java | <1.7.0-ibm-src-1.7.0.9.20-1jpp.1.el5 | 1.7.0-ibm-src-1.7.0.9.20-1jpp.1.el5 |
| redhat/java | <1.7.0-ibm-src-1.7.0.9.20-1jpp.1.el5 | 1.7.0-ibm-src-1.7.0.9.20-1jpp.1.el5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1233687
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273022
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273053
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273304
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273308
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273311
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273318
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273338
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273414
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273425
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273430
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273496
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273637
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273638
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273734
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273858
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273859
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273860
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1282379
- https://access.redhat.com/security/updates/classification/#critical
- http://www.ibm.com/developerworks/java/jdk/alerts/
- https://access.redhat.com/errata/RHSA-2015:2507 (Advisory)
Frequently Asked Questions
What is the severity of RHSA-2015:2507?
The severity of RHSA-2015:2507 is high due to multiple vulnerabilities in the IBM Java Runtime Environment.
How do I fix RHSA-2015:2507?
To fix RHSA-2015:2507, update to the fixed version of the affected IBM Java packages listed in the advisory.
What versions are affected by RHSA-2015:2507?
Versions of IBM Java SE 7 prior to 1.7.0-ibm-1.7.0.9.20-1jpp.1.el5 are affected by RHSA-2015:2507.
Are there any specific packages highlighted in RHSA-2015:2507?
Yes, specific packages include java, java-demo, java-devel, java-jdbc, java-plugin, and java-src related to IBM Java SE.
Is RHSA-2015:2507 related to security vulnerabilities?
Yes, RHSA-2015:2507 addresses security vulnerabilities found in the IBM Java Runtime Environment.
- collector/redhat-errata
- anchor-id/RHSA-2015:2507
- agent/title
- agent/severity
- agent/references
- agent/description
- agent/tags
- agent/type
- agent/event
- agent/remedy
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- package-manager/redhat