Oval Definition:oval:com.redhat.rhsa:def:20070167
Revision Date:2008-03-20Version:602
Title:RHSA-2007:0167: java-1.5.0-ibm security update (Critical)
Description:IBM's 1.5.0 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit.

  • A flaw in GIF image handling was found in the SUN Java Runtime Environment that has now been reported as also affecting IBM Java 2. An untrusted applet or application could use this flaw to elevate its privileges and potentially execute arbitrary code. (CVE-2007-0243)

    This update also resolves the following issues:

    The java-1.5.0-ibm-plugin sub-package conflicted with the new java-1.5.0-sun-plugin sub-package.

    The java-1.5.0-ibm-plugin package had incorrect dependencies. The java-1.5.0-ibm-alsa package has been merged into the java-1.5.0-ibm package to resolve this issue.

    All users of java-ibm-1.5.0 should upgrade to these packages, which contain IBM's 1.5.0 SR4 Java release which resolves these issues.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2007-0243
    RHSA-2007:0167-01
    Platform(s):Supplementary for Red Hat Enterprise Linux 5
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux 5 is installed
  • AND Package Information
  • java-1.5.0-ibm is earlier than 1:1.5.0.4-1jpp.3.el5
  • AND java-1.5.0-ibm is signed with Red Hat redhatrelease key
  • OR
  • java-1.5.0-ibm-demo is earlier than 1:1.5.0.4-1jpp.3.el5
  • AND java-1.5.0-ibm-demo is signed with Red Hat redhatrelease key
  • OR
  • java-1.5.0-ibm-devel is earlier than 1:1.5.0.4-1jpp.3.el5
  • AND java-1.5.0-ibm-devel is signed with Red Hat redhatrelease key
  • OR
  • java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.4-1jpp.3.el5
  • AND java-1.5.0-ibm-javacomm is signed with Red Hat redhatrelease key
  • OR
  • java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.4-1jpp.3.el5
  • AND java-1.5.0-ibm-jdbc is signed with Red Hat redhatrelease key
  • OR
  • java-1.5.0-ibm-plugin is earlier than 1:1.5.0.4-1jpp.3.el5
  • AND java-1.5.0-ibm-plugin is signed with Red Hat redhatrelease key
  • OR
  • java-1.5.0-ibm-src is earlier than 1:1.5.0.4-1jpp.3.el5
  • AND java-1.5.0-ibm-src is signed with Red Hat redhatrelease key
  • BACK