RHSA-2015:2508: Critical: java-1.6.0-ibm security update
IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBMJava Software Development Kit.This update fixes several vulnerabilities in the IBM Java RuntimeEnvironment and the IBM Java Software Development Kit. Further informationabout these flaws can be found on the IBM Java Security alerts page, listedin the References section. (CVE-2015-4734, CVE-2015-4803, CVE-2015-4805,CVE-2015-4806, CVE-2015-4835, CVE-2015-4842, CVE-2015-4843, CVE-2015-4844,CVE-2015-4860, CVE-2015-4872, CVE-2015-4882, CVE-2015-4883, CVE-2015-4893,CVE-2015-4902, CVE-2015-4903, CVE-2015-5006)Red Hat would like to thank Andrea Palazzo of Truel IT for reporting theCVE-2015-4806 issue.All users of java-1.6.0-ibm are advised to upgrade to these updatedpackages, containing the IBM Java SE 6 SR16-FP15 release. All runninginstances of IBM Java must be restarted for the update to take effect.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2015:2508?
RHSA-2015:2508 addresses multiple vulnerabilities in IBM Java SE version 6, which may potentially allow remote code execution.
How do I fix RHSA-2015:2508?
To fix RHSA-2015:2508, update your IBM Java packages to the latest available versions as indicated in the errata.
Which software is affected by RHSA-2015:2508?
RHSA-2015:2508 affects multiple IBM Java packages including ‘java’, ‘java-demo’, ‘java-devel’, ‘java-javacomm’, ‘java-jdbc’, ‘java-plugin’, and ‘java-src’.
Is it safe to ignore the RHSA-2015:2508 vulnerability?
It is not safe to ignore RHSA-2015:2508 as it contains critical vulnerabilities that could be exploited to compromise system security.
When was RHSA-2015:2508 released?
RHSA-2015:2508 was released on November 17, 2015, to address vulnerabilities in the IBM Java SE version 6.