Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Red Hat Enterprise Linux 4: RHSA-2007:0818-01 Critical: XSS And DoS Risks

red hat
Calendar Grey August 6, 2007
Dist Redhat Esm H88
Urgent security patch released for Red Hat Java software targeting XSS and buffer overflow vulnerabilities. Prompt updates essential.
Updated java-1.5.0-sun packages that correct several security issues are available for Red Hat Enterprise Linux 4 Extras

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at

5. Bug IDs fixed (http://bugzilla.redhat.com/):

246765 - CVE-2007-3503 HTML files generated with Javadoc are vulnerable to a XSS 248864 - CVE-2007-3655 A buffer overflow vulnerability in Java Web Start URL parsing code 249533 - CVE-2007-3922 Vulnerability in the Java Runtime Environment May Allow an Untrusted Applet to Circumvent Network Access Restrictions 249539 - CVE-2007-3698 Java Secure Socket Extension Does Not Correctly Process SSL/TLS Handshake Requests Resulting in a Denial of Service (DoS) Condition

6. RPMs required:

Red Hat Enterprise Linux AS version 4 Extras:

SRPMS: b7f11fc62108de501691fe189ff28d4d java-1.5.0-sun-1.5.0.12-1jpp.2.el4.src.rpm

i386: 5288f89064913e18146ab506c59b9f21 java-1.5.0-sun-1.5.0.12-1jpp.2.el4.i586.rpm f5348203e78aa64ad19435b0648feaac java-1.5.0-sun-demo-1.5.0.12-1jpp.2.el4.i586.rpm 83ce83af56148830f7f180c3a130b2ff java-1.5.0-sun-devel-1.5.0.12-1jpp.2.el4.i586.rpm 5e35a59d97f96e946e6041029dc2c18e java-1.5.0-sun-jdbc-1.5.0.12-1jpp.2.el4.i586.rpm e8523c770f5d5e132f805a412de1e4d4 java-1.5.0-sun-plugin-1.5.0.12-1jpp.2.el4.i586.rpm 47475bcd46e37bad046fa7eb26e75c83 java-1.5.0-sun-src-1.5.0.12-1jpp.2.el4.i586.rpm

x86_64: c75ff10faf480c14455e17d19429e762 java-1.5.0-sun-1.5.0.12-1jpp.2.el4.x86_64.rpm ee527a32217fb56fce9c52080959cd2a java-1.5.0-sun-demo-1.5.0.12-1jpp.2.el4.x86_64.rpm 294fbe07c37991b3757e30926b1b9c46 java-1.5.0-sun-devel-1.5.0.12-1jpp.2.el4.x86_64.rpm 8280e5a0c39c55fd8c4cedf1ad0f8b23 java-1.5.0-sun-jdbc-1.5.0.12-1jpp.2.el4.x86_64.rpm 60247d67a91aac8d1bc998c4a076bfab java-1.5.0-sun-src-1.5.0.12-1jpp.2.el4.x86_64.rpm

Red Hat Desktop version 4 Extras:

SRPMS: b7f11fc62108de501691fe189ff28d4d java-1.5.0-sun-1.5.0.12-1jpp.2.el4.src.rpm

i386: 5288f89064913e18146ab506c59b9f21 java-1.5.0-sun-1.5.0.12-1jpp.2.el4.i586.rpm f5348203e78aa64ad19435b0648feaac java-1.5.0-sun-demo-1.5.0.12-1jpp.2.el4.i586.rpm 83ce83af56148830f7f180c3a130b2ff java-1.5.0-sun-devel-1.5.0.12-1jpp.2.el4.i586.rpm 5e35a59d97f96e946e6041029dc2c18e java-1.5.0-sun-jdbc-1.5.0.12-1jpp.2.el4.i586.rpm e8523c770f5d5e132f805a412de1e4d4 java-1.5.0-sun-plugin-1.5.0.12-1jpp.2.el4.i586.rpm 47475bcd46e37bad046fa7eb26e75c83 java-1.5.0-sun-src-1.5.0.12-1jpp.2.el4.i586.rpm

x86_64: c75ff10faf480c14455e17d19429e762 java-1.5.0-sun-1.5.0.12-1jpp.2.el4.x86_64.rpm ee527a32217fb56fce9c52080959cd2a java-1.5.0-sun-demo-1.5.0.12-1jpp.2.el4.x86_64.rpm 294fbe07c37991b3757e30926b1b9c46 java-1.5.0-sun-devel-1.5.0.12-1jpp.2.el4.x86_64.rpm 8280e5a0c39c55fd8c4cedf1ad0f8b23 java-1.5.0-sun-jdbc-1.5.0.12-1jpp.2.el4.x86_64.rpm 60247d67a91aac8d1bc998c4a076bfab java-1.5.0-sun-src-1.5.0.12-1jpp.2.el4.x86_64.rpm

Red Hat Enterprise Linux ES version 4 Extras:

SRPMS: b7f11fc62108de501691fe189ff28d4d java-1.5.0-sun-1.5.0.12-1jpp.2.el4.src.rpm

i386: 5288f89064913e18146ab506c59b9f21 java-1.5.0-sun-1.5.0.12-1jpp.2.el4.i586.rpm f5348203e78aa64ad19435b0648feaac java-1.5.0-sun-demo-1.5.0.12-1jpp.2.el4.i586.rpm 83ce83af56148830f7f180c3a130b2ff java-1.5.0-sun-devel-1.5.0.12-1jpp.2.el4.i586.rpm 5e35a59d97f96e946e6041029dc2c18e java-1.5.0-sun-jdbc-1.5.0.12-1jpp.2.el4.i586.rpm e8523c770f5d5e132f805a412de1e4d4 java-1.5.0-sun-plugin-1.5.0.12-1jpp.2.el4.i586.rpm 47475bcd46e37bad046fa7eb26e75c83 java-1.5.0-sun-src-1.5.0.12-1jpp.2.el4.i586.rpm

x86_64: c75ff10faf480c14455e17d19429e762 java-1.5.0-sun-1.5.0.12-1jpp.2.el4.x86_64.rpm ee527a32217fb56fce9c52080959cd2a java-1.5.0-sun-demo-1.5.0.12-1jpp.2.el4.x86_64.rpm 294fbe07c37991b3757e30926b1b9c46 java-1.5.0-sun-devel-1.5.0.12-1jpp.2.el4.x86_64.rpm 8280e5a0c39c55fd8c4cedf1ad0f8b23 java-1.5.0-sun-jdbc-1.5.0.12-1jpp.2.el4.x86_64.rpm 60247d67a91aac8d1bc998c4a076bfab java-1.5.0-sun-src-1.5.0.12-1jpp.2.el4.x86_64.rpm

Red Hat Enterprise Linux WS version 4 Extras:

SRPMS: b7f11fc62108de501691fe189ff28d4d java-1.5.0-sun-1.5.0.12-1jpp.2.el4.src.rpm

i386: 5288f89064913e18146ab506c59b9f21 java-1.5.0-sun-1.5.0.12-1jpp.2.el4.i586.rpm f5348203e78aa64ad19435b0648feaac java-1.5.0-sun-demo-1.5.0.12-1jpp.2.el4.i586.rpm 83ce83af56148830f7f180c3a130b2ff java-1.5.0-sun-devel-1.5.0.12-1jpp.2.el4.i586.rpm 5e35a59d97f96e946e6041029dc2c18e java-1.5.0-sun-jdbc-1.5.0.12-1jpp.2.el4.i586.rpm e8523c770f5d5e132f805a412de1e4d4 java-1.5.0-sun-plugin-1.5.0.12-1jpp.2.el4.i586.rpm 47475bcd46e37bad046fa7eb26e75c83 java-1.5.0-sun-src-1.5.0.12-1jpp.2.el4.i586.rpm

x86_64: c75ff10faf480c14455e17d19429e762 java-1.5.0-sun-1.5.0.12-1jpp.2.el4.x86_64.rpm ee527a32217fb56fce9c52080959cd2a java-1.5.0-sun-demo-1.5.0.12-1jpp.2.el4.x86_64.rpm 294fbe07c37991b3757e30926b1b9c46 java-1.5.0-sun-devel-1.5.0.12-1jpp.2.el4.x86_64.rpm 8280e5a0c39c55fd8c4cedf1ad0f8b23 java-1.5.0-sun-jdbc-1.5.0.12-1jpp.2.el4.x86_64.rpm 60247d67a91aac8d1bc998c4a076bfab java-1.5.0-sun-src-1.5.0.12-1jpp.2.el4.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package

Summary

Topics%20covered

Topics Covered

security advisory Red Hat critical XSS remote code execution Denial of Service Java update

References

https://www.cve.org/CVERecord?id=CVE-2007-3503 https://www.cve.org/CVERecord?id=CVE-2007-3655 https://www.cve.org/CVERecord?id=CVE-2007-3698 https://www.cve.org/CVERecord?id=CVE-2007-3922 https://access.redhat.com/security/updates/classification#critical

Package List


Severity
critical
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2007:0818-01
Advisory URL: https://access.redhat.com/errata/RHSA-2007:0818.html
Issue date: 2007-08-06
Updated on: 2007-08-06
Product: Red Hat Enterprise Linux Extras

Topic

Topics%20covered

Topics Covered

security advisory Red Hat critical XSS remote code execution Denial of Service Java update

Relevant Releases Architectures

Red Hat Enterprise Linux AS version 4 Extras - i386, x86_64

Red Hat Desktop version 4 Extras - i386, x86_64

Red Hat Enterprise Linux ES version 4 Extras - i386, x86_64

Red Hat Enterprise Linux WS version 4 Extras - i386, x86_64

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here