RHSA-2015:2506Critical

Red Hat Security Advisory: java-1.7.1-ibm security update

Published
November 23, 2015
Last Modified
November 5, 2026

🔗 CVE IDs covered (19)

CVE-2015-4843 →CVE-2015-4844 →CVE-2015-4871 →CVE-2015-4902 →CVE-2015-4734 →CVE-2015-4803 →CVE-2015-4806 →CVE-2015-4810 →CVE-2015-4840 →CVE-2015-4842 →CVE-2015-5006 →CVE-2015-4835 →CVE-2015-4872 →CVE-2015-4882 →CVE-2015-4805 →CVE-2015-4860 →CVE-2015-4883 →CVE-2015-4893 →CVE-2015-4903 →

📋 Description

CVE-2015-4734 — OpenJDK: kerberos realm name leak (JGSS, 8048030) CVE-2015-4803 — OpenJDK: inefficient use of hash tables and lists during XML parsing (JAXP, 8068842) CVE-2015-4805 — OpenJDK: missing checks for proper initialization in ObjectStreamClass (Serialization, 8103671) CVE-2015-4806 — OpenJDK: HttpURLConnection header restriction bypass (Libraries, 8130193) CVE-2015-4810 — JDK: unspecified vulnerability fixed in 7u91 and 8u65 (Deployment) CVE-2015-4835 — OpenJDK: insufficient permission checks in StubGenerator (CORBA, 8076383) CVE-2015-4840 — OpenJDK: OOB access in CMS code (2D, 8086092) CVE-2015-4842 — OpenJDK: leak of user.dir location (JAXP, 8078427) CVE-2015-4843 — OpenJDK: java.nio Buffers integer overflow issues (Libraries, 8130891) CVE-2015-4844 — ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042) CVE-2015-4860 — OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688) CVE-2015-4871 — OpenJDK: protected methods can be used as interface methods via DirectMethodHandle (Libraries) CVE-2015-4872 — OpenJDK: incomplete constraints enforcement by AlgorithmChecker (Security, 8131291) CVE-2015-4882 — OpenJDK: incorrect String object deserialization in IIOPInputStream (CORBA, 8076387) CVE-2015-4883 — OpenJDK: incorrect access control context used in DGCClient (RMI, 8076413) CVE-2015-4893 — OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733) CVE-2015-4902 — JDK: unspecified vulnerability fixed in 6u105, 7u91 and 8u65 (Deployment) CVE-2015-4903 — OpenJDK: insufficient proxy class checks in RemoteObjectInvocationHandler (RMI, 8076339) CVE-2015-5006 — JDK: local disclosure of kerberos credentials cache

🎯 Affected products108

  • Red Hat Enterprise Linux Client Supplementary (v. 7)
  • Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)
  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 7)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 7)
  • java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)
  • java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7.i686 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)
  • java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7.i686 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)
  • java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)
  • java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7.ppc as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7.s390 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)
  • java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)
  • java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)
  • java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)
  • +78 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (23)