- ---------------------------------------------------------------------                   Red Hat Security Advisory

Synopsis:          Critical: java-1.5.0-ibm security update
Advisory ID:       RHSA-2007:0073-01
Advisory URL:      https://access.redhat.com/errata/RHSA-2007:0073.html
Issue date:        2007-02-09
Updated on:        2007-02-09
Product:           Red Hat Enterprise Linux Extras
Obsoletes:         RHEA-2007:0027
CVE Names:         CVE-2006-4339 CVE-2006-6731 CVE-2006-6736 
                   CVE-2006-6737 CVE-2006-6745 
- ---------------------------------------------------------------------1. Summary:

java-1.5.0-ibm packages that correct several security issues are available
for Red Hat Enterprise Linux 4 Extras.

This update has been rated as having critical security impact by the Red
Hat Security Response Team.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS version 4 Extras - i386, ppc, s390, s390x, x86_64
Red Hat Desktop version 4 Extras - i386, x86_64
Red Hat Enterprise Linux ES version 4 Extras - i386, x86_64
Red Hat Enterprise Linux WS version 4 Extras - i386, x86_64

3. Problem description:

IBM's 1.5.0 Java release includes the IBM Java 2 Runtime Environment and
the IBM Java 2 Software Development Kit.

Vulnerabilities were discovered in the Java Runtime Environment. An
untrusted applet could use these vulnerabilities to access data from other
applets. (CVE-2006-6736, CVE-2006-6737)

Serialization flaws were discovered in the Java Runtime Environment. An
untrusted applet or application could use these flaws to elevate its
privileges. (CVE-2006-6745)

Buffer overflow vulnerabilities were discovered in the Java Runtime
Environment. An untrusted applet could use these flaws to elevate its
privileges, possibly reading and writing local files or executing local
applications. (CVE-2006-6731)

Daniel Bleichenbacher discovered an attack on PKCS #1 v1.5 signatures.
Where an RSA key with exponent 3 is used it may be possible for an attacker
to forge a PKCS #1 v1.5 signature that would be incorrectly verified by
implementations that do not check for excess data in the RSA exponentiation
result of the signature. (CVE-2006-4339) 

All users of java-ibm-1.5.0 should upgrade to these packages, which contain
IBM's 1.5.0 SR3 Java release which resolves these issues.

Please note that the packages in this erratum are identical to those we
released on January 24th 2007 in advisory RHEA-2007:0027.  We have issued
this security update because when we released RHEA-2007:0027 we were not
aware that it contained fixes for security issues.  If you have already
updated to those packages you will not need to apply this update.

4. Solution:

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade.  Only those
RPMs which are currently installed will be updated.  Those RPMs which are
not installed but included in the list will not be updated.  Note that you
can also use wildcards (*.rpm) if your current directory *only* contains the
desired RPMs.

Please note that this update is also available via Red Hat Network.  Many
people find this an easier way to apply updates.  To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

5. Bug IDs fixed (http://bugzilla.redhat.com/):

227990 - CVE-2006-6736 Multiple JRE flaws (CVE-2006-6737 CVE-2006-6745 CVE-2006-6731 CVE-2006-4339)

6. RPMs required:

Red Hat Enterprise Linux AS version 4 Extras:

i386:
b67fc6c6d9feea933d088dc62c6f4cbc  java-1.5.0-ibm-1.5.0.3-1jpp.3.el4.i386.rpm
ff5e70fb869a0e5809c9412dab37beba  java-1.5.0-ibm-demo-1.5.0.3-1jpp.3.el4.i386.rpm
9a6030c81894e02ba3468231000d7dd0  java-1.5.0-ibm-devel-1.5.0.3-1jpp.3.el4.i386.rpm
305487b94a158e6f4650bf8a5344e7d5  java-1.5.0-ibm-javacomm-1.5.0.3-1jpp.3.el4.i386.rpm
cdfff7b0c17af7f74c6b7cc0997ff6d5  java-1.5.0-ibm-jdbc-1.5.0.3-1jpp.3.el4.i386.rpm
976a34a3b3443aac3d817526710d802c  java-1.5.0-ibm-plugin-1.5.0.3-1jpp.3.el4.i386.rpm
52321637b5330aeb675579705605c734  java-1.5.0-ibm-src-1.5.0.3-1jpp.3.el4.i386.rpm

ppc:
2fe83ca7ec1ca133b3f8317547e3f273  java-1.5.0-ibm-1.5.0.3-1jpp.3.el4.ppc.rpm
eb516a10d2470b9a418a36d4f21f9a78  java-1.5.0-ibm-demo-1.5.0.3-1jpp.3.el4.ppc.rpm
0ccf358682c76242ea60662ff40e7c43  java-1.5.0-ibm-devel-1.5.0.3-1jpp.3.el4.ppc.rpm
b500aad75868c075e16788c1d786dccf  java-1.5.0-ibm-javacomm-1.5.0.3-1jpp.3.el4.ppc.rpm
b619093731e096af4949b72ff982b6ca  java-1.5.0-ibm-jdbc-1.5.0.3-1jpp.3.el4.ppc.rpm
db04baa7ecc079981f8d2a19af81ace1  java-1.5.0-ibm-plugin-1.5.0.3-1jpp.3.el4.ppc.rpm
6c4d83eee888f0c7665e01b416c264ae  java-1.5.0-ibm-src-1.5.0.3-1jpp.3.el4.ppc.rpm

s390:
4ba21c2cdae2a1ef4e58840ad833e9a0  java-1.5.0-ibm-1.5.0.3-1jpp.3.el4.s390.rpm
115c4afc374dc7c02479c9a5b94922a0  java-1.5.0-ibm-demo-1.5.0.3-1jpp.3.el4.s390.rpm
64da33008e9d625bf50d0824832caba2  java-1.5.0-ibm-devel-1.5.0.3-1jpp.3.el4.s390.rpm
161710bcac5f0c3492f141e3316828e7  java-1.5.0-ibm-jdbc-1.5.0.3-1jpp.3.el4.s390.rpm
281cff793123a37c13160aa819417124  java-1.5.0-ibm-src-1.5.0.3-1jpp.3.el4.s390.rpm

s390x:
55ececa007e534f5e27ac5291c6ffb48  java-1.5.0-ibm-1.5.0.3-1jpp.3.el4.s390x.rpm
22d24231609afff610dc089415b4a91a  java-1.5.0-ibm-demo-1.5.0.3-1jpp.3.el4.s390x.rpm
236ca00cb7add0571df0985381a377eb  java-1.5.0-ibm-devel-1.5.0.3-1jpp.3.el4.s390x.rpm
e49a180a24e81be67bab59f52769c597  java-1.5.0-ibm-src-1.5.0.3-1jpp.3.el4.s390x.rpm

x86_64:
9534b0f12f981f71a94103f90ec80b60  java-1.5.0-ibm-1.5.0.3-1jpp.3.el4.x86_64.rpm
0a76b8a704280936931b23e6638644c2  java-1.5.0-ibm-demo-1.5.0.3-1jpp.3.el4.x86_64.rpm
1e5c8aa0927e9114b1f4de7e6030b397  java-1.5.0-ibm-devel-1.5.0.3-1jpp.3.el4.x86_64.rpm
25ae36a6aa824ce3e30bc6ed35bf3659  java-1.5.0-ibm-javacomm-1.5.0.3-1jpp.3.el4.x86_64.rpm
67d22d181c1cef2a66f5077b41a8ee7d  java-1.5.0-ibm-src-1.5.0.3-1jpp.3.el4.x86_64.rpm

Red Hat Desktop version 4 Extras:

i386:
b67fc6c6d9feea933d088dc62c6f4cbc  java-1.5.0-ibm-1.5.0.3-1jpp.3.el4.i386.rpm
ff5e70fb869a0e5809c9412dab37beba  java-1.5.0-ibm-demo-1.5.0.3-1jpp.3.el4.i386.rpm
9a6030c81894e02ba3468231000d7dd0  java-1.5.0-ibm-devel-1.5.0.3-1jpp.3.el4.i386.rpm
305487b94a158e6f4650bf8a5344e7d5  java-1.5.0-ibm-javacomm-1.5.0.3-1jpp.3.el4.i386.rpm
cdfff7b0c17af7f74c6b7cc0997ff6d5  java-1.5.0-ibm-jdbc-1.5.0.3-1jpp.3.el4.i386.rpm
976a34a3b3443aac3d817526710d802c  java-1.5.0-ibm-plugin-1.5.0.3-1jpp.3.el4.i386.rpm
52321637b5330aeb675579705605c734  java-1.5.0-ibm-src-1.5.0.3-1jpp.3.el4.i386.rpm

x86_64:
9534b0f12f981f71a94103f90ec80b60  java-1.5.0-ibm-1.5.0.3-1jpp.3.el4.x86_64.rpm
0a76b8a704280936931b23e6638644c2  java-1.5.0-ibm-demo-1.5.0.3-1jpp.3.el4.x86_64.rpm
1e5c8aa0927e9114b1f4de7e6030b397  java-1.5.0-ibm-devel-1.5.0.3-1jpp.3.el4.x86_64.rpm
25ae36a6aa824ce3e30bc6ed35bf3659  java-1.5.0-ibm-javacomm-1.5.0.3-1jpp.3.el4.x86_64.rpm
67d22d181c1cef2a66f5077b41a8ee7d  java-1.5.0-ibm-src-1.5.0.3-1jpp.3.el4.x86_64.rpm

Red Hat Enterprise Linux ES version 4 Extras:

i386:
b67fc6c6d9feea933d088dc62c6f4cbc  java-1.5.0-ibm-1.5.0.3-1jpp.3.el4.i386.rpm
ff5e70fb869a0e5809c9412dab37beba  java-1.5.0-ibm-demo-1.5.0.3-1jpp.3.el4.i386.rpm
9a6030c81894e02ba3468231000d7dd0  java-1.5.0-ibm-devel-1.5.0.3-1jpp.3.el4.i386.rpm
305487b94a158e6f4650bf8a5344e7d5  java-1.5.0-ibm-javacomm-1.5.0.3-1jpp.3.el4.i386.rpm
cdfff7b0c17af7f74c6b7cc0997ff6d5  java-1.5.0-ibm-jdbc-1.5.0.3-1jpp.3.el4.i386.rpm
976a34a3b3443aac3d817526710d802c  java-1.5.0-ibm-plugin-1.5.0.3-1jpp.3.el4.i386.rpm
52321637b5330aeb675579705605c734  java-1.5.0-ibm-src-1.5.0.3-1jpp.3.el4.i386.rpm

x86_64:
9534b0f12f981f71a94103f90ec80b60  java-1.5.0-ibm-1.5.0.3-1jpp.3.el4.x86_64.rpm
0a76b8a704280936931b23e6638644c2  java-1.5.0-ibm-demo-1.5.0.3-1jpp.3.el4.x86_64.rpm
1e5c8aa0927e9114b1f4de7e6030b397  java-1.5.0-ibm-devel-1.5.0.3-1jpp.3.el4.x86_64.rpm
25ae36a6aa824ce3e30bc6ed35bf3659  java-1.5.0-ibm-javacomm-1.5.0.3-1jpp.3.el4.x86_64.rpm
67d22d181c1cef2a66f5077b41a8ee7d  java-1.5.0-ibm-src-1.5.0.3-1jpp.3.el4.x86_64.rpm

Red Hat Enterprise Linux WS version 4 Extras:

i386:
b67fc6c6d9feea933d088dc62c6f4cbc  java-1.5.0-ibm-1.5.0.3-1jpp.3.el4.i386.rpm
ff5e70fb869a0e5809c9412dab37beba  java-1.5.0-ibm-demo-1.5.0.3-1jpp.3.el4.i386.rpm
9a6030c81894e02ba3468231000d7dd0  java-1.5.0-ibm-devel-1.5.0.3-1jpp.3.el4.i386.rpm
305487b94a158e6f4650bf8a5344e7d5  java-1.5.0-ibm-javacomm-1.5.0.3-1jpp.3.el4.i386.rpm
cdfff7b0c17af7f74c6b7cc0997ff6d5  java-1.5.0-ibm-jdbc-1.5.0.3-1jpp.3.el4.i386.rpm
976a34a3b3443aac3d817526710d802c  java-1.5.0-ibm-plugin-1.5.0.3-1jpp.3.el4.i386.rpm
52321637b5330aeb675579705605c734  java-1.5.0-ibm-src-1.5.0.3-1jpp.3.el4.i386.rpm

x86_64:
9534b0f12f981f71a94103f90ec80b60  java-1.5.0-ibm-1.5.0.3-1jpp.3.el4.x86_64.rpm
0a76b8a704280936931b23e6638644c2  java-1.5.0-ibm-demo-1.5.0.3-1jpp.3.el4.x86_64.rpm
1e5c8aa0927e9114b1f4de7e6030b397  java-1.5.0-ibm-devel-1.5.0.3-1jpp.3.el4.x86_64.rpm
25ae36a6aa824ce3e30bc6ed35bf3659  java-1.5.0-ibm-javacomm-1.5.0.3-1jpp.3.el4.x86_64.rpm
67d22d181c1cef2a66f5077b41a8ee7d  java-1.5.0-ibm-src-1.5.0.3-1jpp.3.el4.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and 
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package

7. References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4339
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6731
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6736
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6737
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6745
https://www.ibm.com/us-en
http://www.redhat.com/security/updates/classification/#critical

8. Contact:

The Red Hat security contact is .  More contact
details at https://www.redhat.com/security/team/contact/

Copyright 2007 Red Hat, Inc.

RedHat: Critical: java-1.5.0-ibm security update RHSA-2007:0073-01

java-1.5.0-ibm packages that correct several security issues are available for Red Hat Enterprise Linux 4 Extras

Summary



Summary

IBM's 1.5.0 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. Vulnerabilities were discovered in the Java Runtime Environment. An untrusted applet could use these vulnerabilities to access data from other applets. (CVE-2006-6736, CVE-2006-6737) Serialization flaws were discovered in the Java Runtime Environment. An untrusted applet or application could use these flaws to elevate its privileges. (CVE-2006-6745) Buffer overflow vulnerabilities were discovered in the Java Runtime Environment. An untrusted applet could use these flaws to elevate its privileges, possibly reading and writing local files or executing local applications. (CVE-2006-6731) Daniel Bleichenbacher discovered an attack on PKCS #1 v1.5 signatures. Where an RSA key with exponent 3 is used it may be possible for an attacker to forge a PKCS #1 v1.5 signature that would be incorrectly verified by implementations that do not check for excess data in the RSA exponentiation result of the signature. (CVE-2006-4339) All users of java-ibm-1.5.0 should upgrade to these packages, which contain IBM's 1.5.0 SR3 Java release which resolves these issues. Please note that the packages in this erratum are identical to those we released on January 24th 2007 in advisory RHEA-2007:0027. We have issued this security update because when we released RHEA-2007:0027 we were not aware that it contained fixes for security issues. If you have already updated to those packages you will not need to apply this update.


Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.
To update all RPMs for your particular architecture, run:
rpm -Fvh [filenames]
where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs.
Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command:
up2date
This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
5. Bug IDs fixed (http://bugzilla.redhat.com/):
227990 - CVE-2006-6736 Multiple JRE flaws (CVE-2006-6737 CVE-2006-6745 CVE-2006-6731 CVE-2006-4339)
6. RPMs required:
Red Hat Enterprise Linux AS version 4 Extras:
i386: b67fc6c6d9feea933d088dc62c6f4cbc java-1.5.0-ibm-1.5.0.3-1jpp.3.el4.i386.rpm ff5e70fb869a0e5809c9412dab37beba java-1.5.0-ibm-demo-1.5.0.3-1jpp.3.el4.i386.rpm 9a6030c81894e02ba3468231000d7dd0 java-1.5.0-ibm-devel-1.5.0.3-1jpp.3.el4.i386.rpm 305487b94a158e6f4650bf8a5344e7d5 java-1.5.0-ibm-javacomm-1.5.0.3-1jpp.3.el4.i386.rpm cdfff7b0c17af7f74c6b7cc0997ff6d5 java-1.5.0-ibm-jdbc-1.5.0.3-1jpp.3.el4.i386.rpm 976a34a3b3443aac3d817526710d802c java-1.5.0-ibm-plugin-1.5.0.3-1jpp.3.el4.i386.rpm 52321637b5330aeb675579705605c734 java-1.5.0-ibm-src-1.5.0.3-1jpp.3.el4.i386.rpm
ppc: 2fe83ca7ec1ca133b3f8317547e3f273 java-1.5.0-ibm-1.5.0.3-1jpp.3.el4.ppc.rpm eb516a10d2470b9a418a36d4f21f9a78 java-1.5.0-ibm-demo-1.5.0.3-1jpp.3.el4.ppc.rpm 0ccf358682c76242ea60662ff40e7c43 java-1.5.0-ibm-devel-1.5.0.3-1jpp.3.el4.ppc.rpm b500aad75868c075e16788c1d786dccf java-1.5.0-ibm-javacomm-1.5.0.3-1jpp.3.el4.ppc.rpm b619093731e096af4949b72ff982b6ca java-1.5.0-ibm-jdbc-1.5.0.3-1jpp.3.el4.ppc.rpm db04baa7ecc079981f8d2a19af81ace1 java-1.5.0-ibm-plugin-1.5.0.3-1jpp.3.el4.ppc.rpm 6c4d83eee888f0c7665e01b416c264ae java-1.5.0-ibm-src-1.5.0.3-1jpp.3.el4.ppc.rpm
s390: 4ba21c2cdae2a1ef4e58840ad833e9a0 java-1.5.0-ibm-1.5.0.3-1jpp.3.el4.s390.rpm 115c4afc374dc7c02479c9a5b94922a0 java-1.5.0-ibm-demo-1.5.0.3-1jpp.3.el4.s390.rpm 64da33008e9d625bf50d0824832caba2 java-1.5.0-ibm-devel-1.5.0.3-1jpp.3.el4.s390.rpm 161710bcac5f0c3492f141e3316828e7 java-1.5.0-ibm-jdbc-1.5.0.3-1jpp.3.el4.s390.rpm 281cff793123a37c13160aa819417124 java-1.5.0-ibm-src-1.5.0.3-1jpp.3.el4.s390.rpm
s390x: 55ececa007e534f5e27ac5291c6ffb48 java-1.5.0-ibm-1.5.0.3-1jpp.3.el4.s390x.rpm 22d24231609afff610dc089415b4a91a java-1.5.0-ibm-demo-1.5.0.3-1jpp.3.el4.s390x.rpm 236ca00cb7add0571df0985381a377eb java-1.5.0-ibm-devel-1.5.0.3-1jpp.3.el4.s390x.rpm e49a180a24e81be67bab59f52769c597 java-1.5.0-ibm-src-1.5.0.3-1jpp.3.el4.s390x.rpm
x86_64: 9534b0f12f981f71a94103f90ec80b60 java-1.5.0-ibm-1.5.0.3-1jpp.3.el4.x86_64.rpm 0a76b8a704280936931b23e6638644c2 java-1.5.0-ibm-demo-1.5.0.3-1jpp.3.el4.x86_64.rpm 1e5c8aa0927e9114b1f4de7e6030b397 java-1.5.0-ibm-devel-1.5.0.3-1jpp.3.el4.x86_64.rpm 25ae36a6aa824ce3e30bc6ed35bf3659 java-1.5.0-ibm-javacomm-1.5.0.3-1jpp.3.el4.x86_64.rpm 67d22d181c1cef2a66f5077b41a8ee7d java-1.5.0-ibm-src-1.5.0.3-1jpp.3.el4.x86_64.rpm
Red Hat Desktop version 4 Extras:
i386: b67fc6c6d9feea933d088dc62c6f4cbc java-1.5.0-ibm-1.5.0.3-1jpp.3.el4.i386.rpm ff5e70fb869a0e5809c9412dab37beba java-1.5.0-ibm-demo-1.5.0.3-1jpp.3.el4.i386.rpm 9a6030c81894e02ba3468231000d7dd0 java-1.5.0-ibm-devel-1.5.0.3-1jpp.3.el4.i386.rpm 305487b94a158e6f4650bf8a5344e7d5 java-1.5.0-ibm-javacomm-1.5.0.3-1jpp.3.el4.i386.rpm cdfff7b0c17af7f74c6b7cc0997ff6d5 java-1.5.0-ibm-jdbc-1.5.0.3-1jpp.3.el4.i386.rpm 976a34a3b3443aac3d817526710d802c java-1.5.0-ibm-plugin-1.5.0.3-1jpp.3.el4.i386.rpm 52321637b5330aeb675579705605c734 java-1.5.0-ibm-src-1.5.0.3-1jpp.3.el4.i386.rpm
x86_64: 9534b0f12f981f71a94103f90ec80b60 java-1.5.0-ibm-1.5.0.3-1jpp.3.el4.x86_64.rpm 0a76b8a704280936931b23e6638644c2 java-1.5.0-ibm-demo-1.5.0.3-1jpp.3.el4.x86_64.rpm 1e5c8aa0927e9114b1f4de7e6030b397 java-1.5.0-ibm-devel-1.5.0.3-1jpp.3.el4.x86_64.rpm 25ae36a6aa824ce3e30bc6ed35bf3659 java-1.5.0-ibm-javacomm-1.5.0.3-1jpp.3.el4.x86_64.rpm 67d22d181c1cef2a66f5077b41a8ee7d java-1.5.0-ibm-src-1.5.0.3-1jpp.3.el4.x86_64.rpm
Red Hat Enterprise Linux ES version 4 Extras:
i386: b67fc6c6d9feea933d088dc62c6f4cbc java-1.5.0-ibm-1.5.0.3-1jpp.3.el4.i386.rpm ff5e70fb869a0e5809c9412dab37beba java-1.5.0-ibm-demo-1.5.0.3-1jpp.3.el4.i386.rpm 9a6030c81894e02ba3468231000d7dd0 java-1.5.0-ibm-devel-1.5.0.3-1jpp.3.el4.i386.rpm 305487b94a158e6f4650bf8a5344e7d5 java-1.5.0-ibm-javacomm-1.5.0.3-1jpp.3.el4.i386.rpm cdfff7b0c17af7f74c6b7cc0997ff6d5 java-1.5.0-ibm-jdbc-1.5.0.3-1jpp.3.el4.i386.rpm 976a34a3b3443aac3d817526710d802c java-1.5.0-ibm-plugin-1.5.0.3-1jpp.3.el4.i386.rpm 52321637b5330aeb675579705605c734 java-1.5.0-ibm-src-1.5.0.3-1jpp.3.el4.i386.rpm
x86_64: 9534b0f12f981f71a94103f90ec80b60 java-1.5.0-ibm-1.5.0.3-1jpp.3.el4.x86_64.rpm 0a76b8a704280936931b23e6638644c2 java-1.5.0-ibm-demo-1.5.0.3-1jpp.3.el4.x86_64.rpm 1e5c8aa0927e9114b1f4de7e6030b397 java-1.5.0-ibm-devel-1.5.0.3-1jpp.3.el4.x86_64.rpm 25ae36a6aa824ce3e30bc6ed35bf3659 java-1.5.0-ibm-javacomm-1.5.0.3-1jpp.3.el4.x86_64.rpm 67d22d181c1cef2a66f5077b41a8ee7d java-1.5.0-ibm-src-1.5.0.3-1jpp.3.el4.x86_64.rpm
Red Hat Enterprise Linux WS version 4 Extras:
i386: b67fc6c6d9feea933d088dc62c6f4cbc java-1.5.0-ibm-1.5.0.3-1jpp.3.el4.i386.rpm ff5e70fb869a0e5809c9412dab37beba java-1.5.0-ibm-demo-1.5.0.3-1jpp.3.el4.i386.rpm 9a6030c81894e02ba3468231000d7dd0 java-1.5.0-ibm-devel-1.5.0.3-1jpp.3.el4.i386.rpm 305487b94a158e6f4650bf8a5344e7d5 java-1.5.0-ibm-javacomm-1.5.0.3-1jpp.3.el4.i386.rpm cdfff7b0c17af7f74c6b7cc0997ff6d5 java-1.5.0-ibm-jdbc-1.5.0.3-1jpp.3.el4.i386.rpm 976a34a3b3443aac3d817526710d802c java-1.5.0-ibm-plugin-1.5.0.3-1jpp.3.el4.i386.rpm 52321637b5330aeb675579705605c734 java-1.5.0-ibm-src-1.5.0.3-1jpp.3.el4.i386.rpm
x86_64: 9534b0f12f981f71a94103f90ec80b60 java-1.5.0-ibm-1.5.0.3-1jpp.3.el4.x86_64.rpm 0a76b8a704280936931b23e6638644c2 java-1.5.0-ibm-demo-1.5.0.3-1jpp.3.el4.x86_64.rpm 1e5c8aa0927e9114b1f4de7e6030b397 java-1.5.0-ibm-devel-1.5.0.3-1jpp.3.el4.x86_64.rpm 25ae36a6aa824ce3e30bc6ed35bf3659 java-1.5.0-ibm-javacomm-1.5.0.3-1jpp.3.el4.x86_64.rpm 67d22d181c1cef2a66f5077b41a8ee7d java-1.5.0-ibm-src-1.5.0.3-1jpp.3.el4.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://www.redhat.com/security/team/key/#package

References

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4339 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6731 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6736 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6737 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6745 https://www.ibm.com/us-en http://www.redhat.com/security/updates/classification/#critical

Package List


Severity
Advisory ID: RHSA-2007:0073-01
Advisory URL: https://access.redhat.com/errata/RHSA-2007:0073.html
Issued Date: : 2007-02-09
Updated on: 2007-02-09
Product: Red Hat Enterprise Linux Extras
Obsoletes: RHEA-2007:0027
CVE Names: CVE-2006-4339 CVE-2006-6731 CVE-2006-6736 CVE-2006-6737 CVE-2006-6745 java-1.5.0-ibm packages that correct several security issues are available for Red Hat Enterprise Linux 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team.

Topic


Topic


 

Relevant Releases Architectures

Red Hat Enterprise Linux AS version 4 Extras - i386, ppc, s390, s390x, x86_64

Red Hat Desktop version 4 Extras - i386, x86_64

Red Hat Enterprise Linux ES version 4 Extras - i386, x86_64

Red Hat Enterprise Linux WS version 4 Extras - i386, x86_64


Bugs Fixed


Related News