Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Network Satellite Server 5.3.

This update has been rated as having low security impact by the Red Hat Security Response Team.

This update corrects several security vulnerabilities in the IBM Java Runtime Environment shipped as part of Red Hat Network Satellite Server 5.3. In a typical operating environment, these are of low security risk as the runtime is not used on untrusted applets.

Several flaws were fixed in the IBM Java 2 Runtime Environment.
(CVE-2009-0217, CVE-2009-1093, CVE-2009-1094, CVE-2009-1095, CVE-2009-1096, CVE-2009-1097, CVE-2009-1098, CVE-2009-1099, CVE-2009-1100, CVE-2009-1101, CVE-2009-1103, CVE-2009-1104, CVE-2009-1105, CVE-2009-1106, CVE-2009-1107, CVE-2009-2625, CVE-2009-2670, CVE-2009-2671, CVE-2009-2672, CVE-2009-2673, CVE-2009-2674, CVE-2009-2675, CVE-2009-2676, CVE-2009-3865, CVE-2009-3866, CVE-2009-3867, CVE-2009-3868, CVE-2009-3869, CVE-2009-3871, CVE-2009-3872, CVE-2009-3873, CVE-2009-3874, CVE-2009-3875, CVE-2009-3876, CVE-2009-3877)

Users of Red Hat Network Satellite Server 5.3 are advised to upgrade to these updated java-1.6.0-ibm packages, which resolve these issues.
For this update to take effect, Red Hat Network Satellite Server must be restarted ('/usr/sbin/rhn-satellite restart'), as well as all running instances of IBM Java.

The remote Mac OS X 10.5 host is running a version of Java for Mac OS X that is missing Update 4.

The remote version of this software contains several security vulnerabilities.  A remote attacker could exploit these issues to bypass security restrictions, disclose sensitive information, cause a denial of service, or escalate privileges.

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

The IBM 1.6.0 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit.

This update fixes several vulnerabilities in the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. These vulnerabilities are summarized on the IBM 'Security alerts' page listed in the References section. (CVE-2009-1093, CVE-2009-1094, CVE-2009-1095, CVE-2009-1096, CVE-2009-1097, CVE-2009-1098, CVE-2009-1099, CVE-2009-1100, CVE-2009-1101, CVE-2009-1103, CVE-2009-1104, CVE-2009-1105, CVE-2009-1106, CVE-2009-1107)

All users of java-1.6.0-ibm are advised to upgrade to these updated packages, containing the IBM 1.6.0 SR5 Java release. All running instances of IBM Java must be restarted for the update to take effect.

The Sun JDK 5 was updated to Update18 to fix various bugs and security issues.

CVE-2009-1093: LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier does not close the connection when initialization fails, which allows remote attackers to cause a denial of service (LDAP service hang).

CVE-2009-1094: Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier allows remote LDAP servers to execute arbitrary code via unknown vectors related to serialized data.

CVE-2009-1095: Integer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.

CVE-2009-1096: Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.

CVE-2009-1098: Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files or execute arbitrary code via a crafted GIF image, aka CR 6804998.

CVE-2009-1099: Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a crafted Type1 font, which triggers a buffer overflow.

CVE-2009-1100: Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allow remote attackers to cause a denial of service (disk consumption) via vectors related to temporary font files and (1) 'limits on Font creation,' aka CR 6522586, and (2) another unspecified vector, aka CR 6632886.

CVE-2009-1103: Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to 'deserializing applets,' aka CR 6646860.

CVE-2009-1104: The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.2_19 and earlier does not prevent JavaScript that is loaded from the localhost from connecting to other ports on the system, which allows user-assisted attackers to bypass intended access restrictions via LiveConnect, aka CR 6724331. NOTE: this vulnerability can be leveraged with separate cross-site scripting (XSS) vulnerabilities for remote attack vectors.

CVE-2009-1107: The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a 'Swing JLabel HTML parsing vulnerability,' aka CR 6782871.

IBM Java 6 SR 5 was released fixing various bugs and critical security issues :

  - A vulnerability in the Java Runtime Environment (JRE)     with initializing LDAP connections may be exploited by a     remote client to cause a denial-of-service condition on     the LDAP service. (CVE-2009-1093)

  - A vulnerability in Java Runtime Environment LDAP client     implementation may allow malicious data from an LDAP     server to cause malicious code to be unexpectedly loaded     and executed on an LDAP client. (CVE-2009-1094)

  - Buffer overflow vulnerabilities in the Java Runtime     Environment (JRE) with unpacking applets and Java Web     Start applications using the unpack200 JAR unpacking     utility may allow an untrusted applet or application to     escalate privileges. For example, an untrusted applet     may grant itself permissions to read and write local     files or execute local applications that are accessible     to the user running the untrusted applet. (CVE-2009-1095     / CVE-2009-1096)

  - A buffer overflow vulnerability in the Java Runtime     Environment with processing PNG images may allow an     untrusted Java Web Start application to escalate     privileges. For example, an untrusted application may     grant itself permissions to read and write local files     or execute local applications that are accessible to the     user running the untrusted application. (CVE-2009-1097)

  - A buffer overflow vulnerability in the Java Runtime     Environment with processing GIF images may allow an     untrusted Java Web Start application to escalate     privileges. For example, an untrusted application may     grant itself permissions to read and write local files     or execute local applications that are accessible to the     user running the untrusted application. (CVE-2009-1097)

  - A buffer overflow vulnerability in the Java Runtime     Environment with processing GIF images may allow an     untrusted applet or Java Web Start application to     escalate privileges. For example, an untrusted applet     may grant itself permissions to read and write local     files or execute local applications that are accessible     to the user running the untrusted applet.
    (CVE-2009-1098)

  - A buffer overflow vulnerability in the Java Runtime     Environment with processing fonts may allow an untrusted     applet or Java Web Start application to escalate     privileges. For example, an untrusted applet may grant     itself permissions to read and write local files or     execute local applications that are accessible to the     user running the untrusted applet. (CVE-2009-1099)

  - A vulnerability in the Java Runtime Environment (JRE)     with storing temporary font files may allow an untrusted     applet or application to consume a disproportionate     amount of disk space resulting in a denial-of-service     condition. (CVE-2009-1100)

  - A vulnerability in the Java Runtime Environment (JRE)     with processing temporary font files may allow an     untrusted applet or application to retain temporary     files resulting in a denial-of-service condition.
    (CVE-2009-1100)

  - A vulnerability in the Java Runtime Environment (JRE)     HTTP server implementation may allow a remote client to     create a denial-of-service condition on a JAX-WS service     endpoint that runs on the JRE. (CVE-2009-1101)

  - A vulnerability in the Java Plug-in with deserializing     applets may allow an untrusted applet to escalate     privileges. For example, an untrusted applet may grant     itself permissions to read and write local files or     execute local applications that are accessible to the     user running the untrusted applet. (CVE-2009-1103)

  - The Java Plug-in allows JavaScript code that is loaded     from the localhost to connect to any port on the system.
    This may be leveraged together with XSS vulnerabilities     in a blended attack to access other applications     listening on ports other than the one where the     JavaScript code was served from. (CVE-2009-1104)

  - The Java Plug-in allows a trusted applet to be launched     on an earlier version of the Java Runtime Environment     (JRE) provided the user that downloaded the applet     allows it to run on the requested release. A     vulnerability allows JavaScript code that is present in     the same web page as the applet to exploit known     vulnerabilities of the requested JRE. (CVE-2009-1105)

  - A vulnerability in the Java Runtime Environment with     parsing crossdomain.xml files may allow an untrusted     applet to connect to any site that provides a     crossdomain.xml file instead of sites that allow the     domain that the applet is running on. (CVE-2009-1106)

  - The Java Plugin displays a warning dialog for signed     applets. A signed applet can obscure the contents of the     dialog and trick a user into trusting the applet.
    (CVE-2009-1107)

The update brings IBM Java 5 to SR9-SSU.

It fixes a lot of security issues: CVE-2009-1100: A vulnerability in the Java Runtime Environment (JRE) with storing temporary font files may allow an untrusted applet or application to consume a disproportionate amount of disk space resulting in a denial-of-service condition.

  - A vulnerability in the Java Runtime Environment (JRE)     with processing temporary font files may allow an     untrusted applet or application to retain temporary     files resulting in a denial-of-service condition.
    (CVE-2009-1100)

  - A vulnerability in the Java Plug-in with deserializing     applets may allow an untrusted applet to escalate     privileges. For example, an untrusted applet may grant     itself permissions to read and write local files or     execute local applications that are accessible to the     user running the untrusted applet. (CVE-2009-1103)

  - The Java Plug-in allows JavaScript code that is loaded     from the localhost to connect to any port on the system.
    This may be leveraged together with XSS vulnerabilities     in a blended attack to access other applications     listening on ports other than the one where the     JavaScript code was served from. (CVE-2009-1104)

  - A vulnerability in the Java Runtime Environment (JRE)     with initializing LDAP connections may be exploited by a     remote client to cause a denial-of-service condition on     the LDAP service. (CVE-2009-1093)

  - A vulnerability in Java Runtime Environment LDAP client     implementation may allow malicious data from an LDAP     server to cause malicious code to be unexpectedly loaded     and executed on an LDAP client. (CVE-2009-1094)

  - The Java Plugin displays a warning dialog for signed     applets. A signed applet can obscure the contents of the     dialog and trick a user into trusting the applet.
    (CVE-2009-1107)

  - Buffer overflow vulnerabilities in the Java Runtime     Environment (JRE) with unpacking applets and Java Web     Start applications using the unpack200 JAR unpacking     utility may allow an untrusted applet or application to     escalate privileges. For example, an untrusted applet     may grant itself permissions to read and write local     files or execute local applications that are accessible     to the user running the untrusted applet. (CVE-2009-1095     / CVE-2009-1096)

  - A buffer overflow vulnerability in the Java Runtime     Environment with processing GIF images may allow an     untrusted applet or Java Web Start application to     escalate privileges. For example, an untrusted applet     may grant itself permissions to read and write local     files or execute local applications that are accessible     to the user running the untrusted applet.
    (CVE-2009-1098)

  - A buffer overflow vulnerability in the Java Runtime     Environment with processing fonts may allow an untrusted     applet or Java Web Start application to escalate     privileges. For example, an untrusted applet may grant     itself permissions to read and write local files or     execute local applications that are accessible to the     user running the untrusted applet. (CVE-2009-1099)

a. Service Console update for DHCP and third-party library update    for DHCP client.

   DHCP is an Internet-standard protocol by which a computer can be    connected to a local network, ask to be given configuration    information, and receive from a server enough information to    configure itself as a member of that network.

   A stack-based buffer overflow in the script_write_params method in    ISC DHCP dhclient allows remote DHCP servers to execute arbitrary    code via a crafted subnet-mask option.

   The Common Vulnerabilities and Exposures Project (cve.mitre.org)    has assigned the name CVE-2009-0692 to this issue.

   An insecure temporary file use flaw was discovered in the DHCP    daemon's init script ('/etc/init.d/dhcpd'). A local attacker could    use this flaw to overwrite an arbitrary file with the output of the    'dhcpd -t' command via a symbolic link attack, if a system    administrator executed the DHCP init script with the 'configtest',    'restart', or 'reload' option.

   The Common Vulnerabilities and Exposures Project (cve.mitre.org)    has assigned the name CVE-2009-1893 to this issue.

b. Updated Service Console package kernel

   Service Console package kernel update to version    kernel-2.4.21-58.EL.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2008-4210, CVE-2008-3275, CVE-2008-0598,    CVE-2008-2136, CVE-2008-2812, CVE-2007-6063, CVE-2008-3525 to the    security issues fixed in kernel-2.4.21-58.EL

c. JRE Security Update

   JRE update to version 1.5.0_18, which addresses multiple security    issues that existed in earlier releases of JRE.

   The Common Vulnerabilities and Exposures project (cve.mitre.org) has    assigned the following names to the security issues fixed in    JRE 1.5.0_17: CVE-2008-2086, CVE-2008-5347, CVE-2008-5348,    CVE-2008-5349, CVE-2008-5350, CVE-2008-5351, CVE-2008-5352,    CVE-2008-5353, CVE-2008-5354, CVE-2008-5356, CVE-2008-5357,    CVE-2008-5358, CVE-2008-5359, CVE-2008-5360, CVE-2008-5339,    CVE-2008-5342, CVE-2008-5344, CVE-2008-5345, CVE-2008-5346,    CVE-2008-5340, CVE-2008-5341, CVE-2008-5343, and CVE-2008-5355.

   The Common Vulnerabilities and Exposures project (cve.mitre.org) has    assigned the following names to the security issues fixed in    JRE 1.5.0_18: CVE-2009-1093, CVE-2009-1094, CVE-2009-1095,    CVE-2009-1096, CVE-2009-1097, CVE-2009-1098, CVE-2009-1099,    CVE-2009-1100, CVE-2009-1101, CVE-2009-1102, CVE-2009-1103,    CVE-2009-1104, CVE-2009-1105, CVE-2009-1106, and CVE-2009-1107.

远程主机上安装的 Sun Java Runtime Environment (JRE) 版本低于 6 Update 13 / 5.0 Update 18 / 1.4.2_20 / 1.3.1_25。此类版本可能会受到以下安全问题的影响：

- 拒绝服务漏洞影响 JRE LDAP 实现。(254569)。

- JRE LDAP 实现中的远程代码执行漏洞可允许在受影响的 LDAP 客户端的上下文中运行任意代码。(254569)

- 使用“unpack2000”实用工具解包小程序和 Java Web Start 应用程序时存在多种整数和缓冲区溢出漏洞。
 (254570)

- 存在与临时字体文件的存储和处理有关的多种拒绝服务漏洞。(254608)

- 反序列化小程序时一个权限升级漏洞影响 Java Plug-in。(254611)

- Java Plug-in 中的一个漏洞允许从本地主机加载的 JavaScript 连接到本地系统上的任意端口。(254611)

- Java Plug-in 中的一个漏洞允许恶意 JavaScript 代码利用已由位于同一网页上的小程序加载的 JRE 较早版本中的漏洞。(254611)

- 解析“crossdomain.xml”时 Java Plug-in 中存在的一个问题允许不受信任的小程序连接到托管“crossdomain.xml”文件的任意站点。
 (254611)

- Java Plug-in 允许恶意签名的小程序隐藏安全对话的内容。(254611)

- JRE 虚拟机受到一个权限升级漏洞的影响。(254610)

- 存在多种涉及 JRE 的 PNG 和 GIF 图像处理的缓冲区溢出漏洞。
 (254571)

- 存在多种涉及 JRE 的字体处理的缓冲区溢出漏洞。(254571)

- 拒绝服务漏洞影响 JRE HTTP 服务器实现，可用于造成 JAX-WS 服务端点上的拒绝服务。(254609)

远程 VMware ESX / ESXi 主机缺少一个与安全有关的修补程序。
因此，它受到下列组件中的多个漏洞影响，包括远程代码执行漏洞：

- ISC DHCP dhclient
 - Integrated Services Digital Network (ISDN) 子系统
 - Java Runtime Environment (JRE)
 - Java SE Development Kit (JDK)
 - Java SE Web Start
 - Linux 内核
 - Linux 内核 32 位和 64 位仿真
 - Linux 内核简单互联网转换 INET6
 - Linux 内核 tty
 - Linux 内核虚拟文件系统 (VFS)
 - 适用于 DHCP 的 Red Hat dhcpd init 脚本
 - SBNI WAN 驱动程序

更新后的 java-1.5.0-sun 程序包修正了多个安全问题，现在可用于 Red Hat Network Satellite Server 5.1。

Red Hat 安全响应团队将此更新评级为具有低安全影响。

此更新修正 Red Hat Network Satellite Server 5.1 随附的 Sun Java Runtime Environment 中的多个安全漏洞。在典型的操作环境中，这些问题的安全风险较低，因为不受信任的小程序上不会使用运行时。

修复了 Sun Java 5 Runtime Environment 中的多个缺陷。
CVE-2006-2426、CVE-2008-2086、CVE-2009-1093、CVE-2009-1094、CVE-2009-1095、CVE-2009-1096、CVE-2009-1098、CVE-2009-1099、CVE-2009-1100、CVE-2009-1103、CVE-2009-1104、CVE-2009-1107、CVE-2009-2409、CVE-2009-2475、CVE-2009-2625、CVE-2009-2670、CVE-2009-2671、CVE-2009-2672、CVE-2009-2673、CVE-2009-2675、CVE-2009-2676、CVE-2009-2689、CVE-2009-3728、CVE-2009-3873、CVE-2009-3876、CVE-2009-3877、CVE-2009-3879、CVE-2009-3880、CVE-2009-3881、CVE-2009-3882、CVE-2009-3883、CVE-2009-3884

注意：这是 java-1.5.0-sun 程序包的最终更新，因为 Sun Java SE 5.0 系列版本的服务周期现已结束。取代 Sun Java SE 5.0 的是 IBM Developer Kit for Linux 的 Java 2 Technology Edition，其可通过 Red Hat Network 上的 Satellite 5.1 通道获取。

如需长期解决方案，Red Hat 建议用户从 Sun Java SE 5.0 切换为 IBM Developer Kit for Linux 的 Java 2 Technology Edition。有关说明，请参阅“解决方案”部分。

建议 Red Hat Network Satellite Server 5.1 的用户升级这些更新后的 java-1.5.0-sun 程序包，其中解决了这些问题。
必须重新启动所有正在运行的 Sun Java 实例才能使更新生效。

远程主机上安装的 Sun Java Runtime Environment (JRE) 版本低于 6 Update 13 / 5.0 Update 18 / 1.4.2_20 / 1.3.1_25。此类版本可能会受到以下安全问题的影响：

  - 拒绝服务漏洞影响 JRE LDAP 实现。(254569)。

  - JRE LDAP 实现中存在远程代码执行漏洞，可导致在受影响的 LDAP 客户端的上下文中运行任意代码。(254569)

  - 使用“unpack2000”实用工具解包小程序和 Java Web Start 应用程序时存在多种整数和缓冲区溢出漏洞。
    (254570)

  - 存在多个拒绝服务漏洞，这些漏洞与存储和处理临时字体文件有关。(254608)

  - 反序列化小程序时，存在影响 Java Plug-in 的权限提升漏洞。(254611)

  - Java Plug-in 中存在一个漏洞，允许从本地主机加载的 JavaScript 连接到本地系统上的任意端口。(254611)

  - Java Plug-in 中存在一个漏洞，允许恶意 JavaScript 代码利用同一网页上小程序所加载 JRE 较早版本中的漏洞。(254611)

  - 解析“crossdomain.xml”时 Java Plug-in 中存在的一个问题允许不受信任的小程序连接到托管“crossdomain.xml”文件的任意站点。
    (254611)

  - Java Plug-in 允许恶意签名的小程序隐藏安全对话的内容。(254611)

  - JRE 虚拟机受到权限提升漏洞的影响。(254610)

  - 存在多种涉及 JRE 的 PNG 和 GIF 图像处理的缓冲区溢出漏洞。
    (254571)

  - 存在多个缓冲区溢出漏洞，这些漏洞与 JRE 的字体处理有关。(254571)

  - 存在影响 JRE HTTP 服务器实现的拒绝服务漏洞，攻击者可利用此漏洞，造成 JAX-WS 服务端点拒绝服务。(254609)

JavaSE 6_x86：更新 71 修补程序（等同于 JDK 6u71），64 位。Sun 上次更新此修补程序的日期：2014 年 1 月 14 日

JavaSE 6_x86：更新 75 修补程序（等同于 JDK 6u75），64 位。Sun 上次更新此修补程序的日期：2014 年 4 月 14 日

ID	Name	Product	Family	Published	Updated	Severity
44029	RHEL 4 / 5 : IBM Java Runtime in Satellite Server (RHSA-2010:0043)	Nessus	Red Hat Local Security Checks	1/15/2010	1/14/2021	critical
39435	Mac OS X : Java for Mac OS X 10.5 Update 4	Nessus	MacOS X Local Security Checks	6/17/2009	11/27/2023	high
40747	RHEL 4 / 5 : java-1.6.0-ibm (RHSA-2009:1198)	Nessus	Red Hat Local Security Checks	8/24/2009	1/14/2021	critical
36070	openSUSE 10 Security Update : java-1_5_0-sun (java-1_5_0-sun-6125)	Nessus	SuSE Local Security Checks	4/1/2009	1/14/2021	critical
41406	SuSE 11 Security Update : IBM Java 1.6.0 (SAT Patch Number 1058)	Nessus	SuSE Local Security Checks	9/24/2009	1/14/2021	critical
41528	SuSE 10 Security Update : IBM Java 5 (ZYPP Patch Number 6253)	Nessus	SuSE Local Security Checks	9/24/2009	1/14/2021	critical
42179	VMSA-2009-0014 : VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues	Nessus	VMware ESX Local Security Checks	10/19/2009	1/6/2021	high
64829	Sun Java JRE 多种漏洞 (254569 / 254611 / 254608 ..)(Unix)	Nessus	Misc.	2/22/2013	4/11/2022	critical
89116	VMware ESX / ESXi 多个漏洞 (VMSA-2009-0014)（远程检查）	Nessus	Misc.	3/3/2016	1/6/2021	critical
53539	RHEL 4：Satellite Server 中的 Sun Java Runtime (RHSA-2009:1662)	Nessus	Red Hat Local Security Checks	4/23/2011	1/14/2021	critical
36034	Sun Java JRE 多种漏洞 (254569 / 254611 / 254608 ..)	Nessus	Windows	3/27/2009	4/11/2022	high
107920	Solaris 10 (x86)：125139-71	Nessus	Solaris Local Security Checks	3/12/2018	1/14/2021	critical
107921	Solaris 10 (x86)：125139-75	Nessus	Solaris Local Security Checks	3/12/2018	1/14/2021	critical

Detections

Analytics

Plugins Search

critical

high

critical

critical

critical

critical

high

critical

critical

critical

high

critical

critical