- Vulnerability/
- RHSA-2015:2508
RHSA-2015:2508: Critical: java-1.6.0-ibm security update
First published: Mon Nov 23 2015(Updated: )
IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM<br>Java Software Development Kit.<br>This update fixes several vulnerabilities in the IBM Java Runtime<br>Environment and the IBM Java Software Development Kit. Further information<br>about these flaws can be found on the IBM Java Security alerts page, listed<br>in the References section. (CVE-2015-4734, CVE-2015-4803, CVE-2015-4805,<br>CVE-2015-4806, CVE-2015-4835, CVE-2015-4842, CVE-2015-4843, CVE-2015-4844,<br>CVE-2015-4860, CVE-2015-4872, CVE-2015-4882, CVE-2015-4883, CVE-2015-4893,<br>CVE-2015-4902, CVE-2015-4903, CVE-2015-5006)<br>Red Hat would like to thank Andrea Palazzo of Truel IT for reporting the<br>CVE-2015-4806 issue.<br>All users of java-1.6.0-ibm are advised to upgrade to these updated<br>packages, containing the IBM Java SE 6 SR16-FP15 release. All running<br>instances of IBM Java must be restarted for the update to take effect.<br>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/java | <1.6.0-ibm-1.6.0.16.15-1jpp.1.el6_7 | 1.6.0-ibm-1.6.0.16.15-1jpp.1.el6_7 |
| redhat/java | <1.6.0-ibm-demo-1.6.0.16.15-1jpp.1.el6_7 | 1.6.0-ibm-demo-1.6.0.16.15-1jpp.1.el6_7 |
| redhat/java | <1.6.0-ibm-devel-1.6.0.16.15-1jpp.1.el6_7 | 1.6.0-ibm-devel-1.6.0.16.15-1jpp.1.el6_7 |
| redhat/java | <1.6.0-ibm-javacomm-1.6.0.16.15-1jpp.1.el6_7 | 1.6.0-ibm-javacomm-1.6.0.16.15-1jpp.1.el6_7 |
| redhat/java | <1.6.0-ibm-jdbc-1.6.0.16.15-1jpp.1.el6_7 | 1.6.0-ibm-jdbc-1.6.0.16.15-1jpp.1.el6_7 |
| redhat/java | <1.6.0-ibm-plugin-1.6.0.16.15-1jpp.1.el6_7 | 1.6.0-ibm-plugin-1.6.0.16.15-1jpp.1.el6_7 |
| redhat/java | <1.6.0-ibm-src-1.6.0.16.15-1jpp.1.el6_7 | 1.6.0-ibm-src-1.6.0.16.15-1jpp.1.el6_7 |
| redhat/java | <1.6.0-ibm-1.6.0.16.15-1jpp.1.el6_7 | 1.6.0-ibm-1.6.0.16.15-1jpp.1.el6_7 |
| redhat/java | <1.6.0-ibm-demo-1.6.0.16.15-1jpp.1.el6_7 | 1.6.0-ibm-demo-1.6.0.16.15-1jpp.1.el6_7 |
| redhat/java | <1.6.0-ibm-devel-1.6.0.16.15-1jpp.1.el6_7 | 1.6.0-ibm-devel-1.6.0.16.15-1jpp.1.el6_7 |
| redhat/java | <1.6.0-ibm-javacomm-1.6.0.16.15-1jpp.1.el6_7 | 1.6.0-ibm-javacomm-1.6.0.16.15-1jpp.1.el6_7 |
| redhat/java | <1.6.0-ibm-jdbc-1.6.0.16.15-1jpp.1.el6_7 | 1.6.0-ibm-jdbc-1.6.0.16.15-1jpp.1.el6_7 |
| redhat/java | <1.6.0-ibm-plugin-1.6.0.16.15-1jpp.1.el6_7 | 1.6.0-ibm-plugin-1.6.0.16.15-1jpp.1.el6_7 |
| redhat/java | <1.6.0-ibm-src-1.6.0.16.15-1jpp.1.el6_7 | 1.6.0-ibm-src-1.6.0.16.15-1jpp.1.el6_7 |
| redhat/java | <1.6.0-ibm-1.6.0.16.15-1jpp.1.el5 | 1.6.0-ibm-1.6.0.16.15-1jpp.1.el5 |
| redhat/java | <1.6.0-ibm-1.6.0.16.15-1jpp.1.el5 | 1.6.0-ibm-1.6.0.16.15-1jpp.1.el5 |
| redhat/java | <1.6.0-ibm-accessibility-1.6.0.16.15-1jpp.1.el5 | 1.6.0-ibm-accessibility-1.6.0.16.15-1jpp.1.el5 |
| redhat/java | <1.6.0-ibm-demo-1.6.0.16.15-1jpp.1.el5 | 1.6.0-ibm-demo-1.6.0.16.15-1jpp.1.el5 |
| redhat/java | <1.6.0-ibm-demo-1.6.0.16.15-1jpp.1.el5 | 1.6.0-ibm-demo-1.6.0.16.15-1jpp.1.el5 |
| redhat/java | <1.6.0-ibm-devel-1.6.0.16.15-1jpp.1.el5 | 1.6.0-ibm-devel-1.6.0.16.15-1jpp.1.el5 |
| redhat/java | <1.6.0-ibm-devel-1.6.0.16.15-1jpp.1.el5 | 1.6.0-ibm-devel-1.6.0.16.15-1jpp.1.el5 |
| redhat/java | <1.6.0-ibm-javacomm-1.6.0.16.15-1jpp.1.el5 | 1.6.0-ibm-javacomm-1.6.0.16.15-1jpp.1.el5 |
| redhat/java | <1.6.0-ibm-javacomm-1.6.0.16.15-1jpp.1.el5 | 1.6.0-ibm-javacomm-1.6.0.16.15-1jpp.1.el5 |
| redhat/java | <1.6.0-ibm-jdbc-1.6.0.16.15-1jpp.1.el5 | 1.6.0-ibm-jdbc-1.6.0.16.15-1jpp.1.el5 |
| redhat/java | <1.6.0-ibm-jdbc-1.6.0.16.15-1jpp.1.el5 | 1.6.0-ibm-jdbc-1.6.0.16.15-1jpp.1.el5 |
| redhat/java | <1.6.0-ibm-plugin-1.6.0.16.15-1jpp.1.el5 | 1.6.0-ibm-plugin-1.6.0.16.15-1jpp.1.el5 |
| redhat/java | <1.6.0-ibm-plugin-1.6.0.16.15-1jpp.1.el5 | 1.6.0-ibm-plugin-1.6.0.16.15-1jpp.1.el5 |
| redhat/java | <1.6.0-ibm-src-1.6.0.16.15-1jpp.1.el5 | 1.6.0-ibm-src-1.6.0.16.15-1jpp.1.el5 |
| redhat/java | <1.6.0-ibm-src-1.6.0.16.15-1jpp.1.el5 | 1.6.0-ibm-src-1.6.0.16.15-1jpp.1.el5 |
| redhat/java | <1.6.0-ibm-accessibility-1.6.0.16.15-1jpp.1.el5 | 1.6.0-ibm-accessibility-1.6.0.16.15-1jpp.1.el5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1233687
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273022
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273053
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273304
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273308
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273311
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273318
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273414
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273425
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273430
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273496
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273637
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273638
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273734
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1273860
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1282379
- https://access.redhat.com/security/updates/classification/#critical
- https://www.ibm.com/developerworks/java/jdk/alerts/
- https://access.redhat.com/errata/RHSA-2015:2508 (Advisory)
Frequently Asked Questions
What is the severity of RHSA-2015:2508?
RHSA-2015:2508 addresses multiple vulnerabilities in IBM Java SE version 6, which may potentially allow remote code execution.
How do I fix RHSA-2015:2508?
To fix RHSA-2015:2508, update your IBM Java packages to the latest available versions as indicated in the errata.
Which software is affected by RHSA-2015:2508?
RHSA-2015:2508 affects multiple IBM Java packages including ‘java’, ‘java-demo’, ‘java-devel’, ‘java-javacomm’, ‘java-jdbc’, ‘java-plugin’, and ‘java-src’.
Is it safe to ignore the RHSA-2015:2508 vulnerability?
It is not safe to ignore RHSA-2015:2508 as it contains critical vulnerabilities that could be exploited to compromise system security.
When was RHSA-2015:2508 released?
RHSA-2015:2508 was released on November 17, 2015, to address vulnerabilities in the IBM Java SE version 6.
- collector/redhat-errata
- anchor-id/RHSA-2015:2508
- package-manager/redhat