Red Hat: RHSA-2007:0963-01 Important: Java Network Exploits

red hat

October 12, 2007

Updated java-1.5.0-sun packages that correct several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. This update has been rated as ha...

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at

5. Bug IDs fixed (http://bugzilla.redhat.com/):

321951 - CVE-2007-5232 Security Vulnerability in Java Runtime Environment With Applet Caching 321961 - CVE-2007-5238 Vulnerabilities in Java Web Start allow to determine the location of the Java Web Start cache 321981 - CVE-2007-5239 Untrusted Application or Applet May Move or Copy Arbitrary Files 321991 - CVE-2007-5240 Applets or Applications are allowed to display an oversized window 324351 - CVE-2007-5273 Anti-DNS Pinning and Java Applets with HTTP proxy 324361 - CVE-2007-5274 Anti-DNS Pinning and Java Applets with Opera and Firefox

6. RPMs required:

Red Hat Enterprise Linux AS version 4 Extras:

i386: 3706c9413164ce5b813c58cccdef2c0d java-1.5.0-sun-1.5.0.13-1jpp.1.el4.i586.rpm fc5b7afe7ad0dafc7674046926e4a85d java-1.5.0-sun-demo-1.5.0.13-1jpp.1.el4.i586.rpm 18cf410980bd3bf9c6efd15e65a5ab55 java-1.5.0-sun-devel-1.5.0.13-1jpp.1.el4.i586.rpm a8836d4cddc258e716b1b3c391e3e703 java-1.5.0-sun-jdbc-1.5.0.13-1jpp.1.el4.i586.rpm 7ccd54c80d4fc8af6fd734454c513916 java-1.5.0-sun-plugin-1.5.0.13-1jpp.1.el4.i586.rpm 55c3f4337a6c7a7f24961ea1aab7cc51 java-1.5.0-sun-src-1.5.0.13-1jpp.1.el4.i586.rpm

x86_64: 910cd54c393e23be712e998c71896f4a java-1.5.0-sun-1.5.0.13-1jpp.1.el4.x86_64.rpm d7212d88844bab46f7100886fcbd9957 java-1.5.0-sun-demo-1.5.0.13-1jpp.1.el4.x86_64.rpm b199fc01e8f065cf24682f529c0124bf java-1.5.0-sun-devel-1.5.0.13-1jpp.1.el4.x86_64.rpm acc23e5c0ca693c9b0687072db464e12 java-1.5.0-sun-jdbc-1.5.0.13-1jpp.1.el4.x86_64.rpm ecc90825333738682d92f571622fc071 java-1.5.0-sun-src-1.5.0.13-1jpp.1.el4.x86_64.rpm

Red Hat Desktop version 4 Extras:

Red Hat Enterprise Linux ES version 4 Extras:

Red Hat Enterprise Linux WS version 4 Extras:

RHEL Desktop Supplementary (v. 5 client):

i386: 35c9332d0204f54b5b056474bdeaeccf java-1.5.0-sun-1.5.0.13-1jpp.1.el5.i586.rpm 44f9288677a80fcbafba3a5fed92e592 java-1.5.0-sun-demo-1.5.0.13-1jpp.1.el5.i586.rpm c5239b51ae5dea75c6b2b0320f0714a4 java-1.5.0-sun-devel-1.5.0.13-1jpp.1.el5.i586.rpm d523a49ce4259e115a17531a6b23e467 java-1.5.0-sun-jdbc-1.5.0.13-1jpp.1.el5.i586.rpm 3b986af374d7cbc7ea45ed77bf218ebb java-1.5.0-sun-plugin-1.5.0.13-1jpp.1.el5.i586.rpm 067de5283b3a7a21d00b89eda43e6280 java-1.5.0-sun-src-1.5.0.13-1jpp.1.el5.i586.rpm

x86_64: d5f5265a30c8e070f32bcab27acec770 java-1.5.0-sun-1.5.0.13-1jpp.1.el5.x86_64.rpm 1e0e4593210908b9b328510de912bf4d java-1.5.0-sun-demo-1.5.0.13-1jpp.1.el5.x86_64.rpm 383d3f8999dcca1f789bb1ca3b1da61a java-1.5.0-sun-devel-1.5.0.13-1jpp.1.el5.x86_64.rpm 305bdcd08a3085516b1cebde6ffdd3e0 java-1.5.0-sun-jdbc-1.5.0.13-1jpp.1.el5.x86_64.rpm 3b986af374d7cbc7ea45ed77bf218ebb java-1.5.0-sun-plugin-1.5.0.13-1jpp.1.el5.i586.rpm 8b9d091c14eee7ceece65a9239a20715 java-1.5.0-sun-src-1.5.0.13-1jpp.1.el5.x86_64.rpm

RHEL Supplementary (v. 5 server):

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package

Summary

Topics Covered

security advisory security update Red Hat network flaw remote access important Java

References

https://www.cve.org/CVERecord?id=CVE-2007-5232 https://www.cve.org/CVERecord?id=CVE-2007-5238 https://www.cve.org/CVERecord?id=CVE-2007-5239 https://www.cve.org/CVERecord?id=CVE-2007-5240 https://www.cve.org/CVERecord?id=CVE-2007-5273 https://www.cve.org/CVERecord?id=CVE-2007-5274 https://access.redhat.com/security/updates/classification#important

Package List

Severity

important

Lowest

Low

Medium

High

Critical

Advisory ID: RHSA-2007:0963-01

Advisory URL: https://access.redhat.com/errata/RHSA-2007:0963.html

Issue date: 2007-10-12

Updated on: 2007-10-12

Product: Red Hat Enterprise Linux Extras

Topic

Topics Covered

security advisory security update Red Hat network flaw remote access important Java

Relevant Releases Architectures

Red Hat Enterprise Linux AS version 4 Extras - i386, x86_64

Red Hat Desktop version 4 Extras - i386, x86_64

Red Hat Enterprise Linux ES version 4 Extras - i386, x86_64

Red Hat Enterprise Linux WS version 4 Extras - i386, x86_64

RHEL Desktop Supplementary (v. 5 client) - i386, x86_64

RHEL Supplementary (v. 5 server) - i386, x86_64

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Red Hat: RHSA-2007:0963-01 Important: Java Network Exploits

Solution

Summary

Topics Covered

References

Package List

Topic

Topics Covered

Relevant Releases Architectures

Bugs Fixed

Get the latest News and Insights

Powered By

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

QUICK LINKS

subscribe to newsletters!

Red Hat: RHSA-2007:0963-01 Important: Java Network Exploits

Solution

Summary

Topics Covered

References

Package List

Topic

Topics Covered

Relevant Releases Architectures

Bugs Fixed

Get the latest News and Insights

Related Articles

Powered By

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

QUICK LINKS

subscribe to newsletters!