Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Network Satellite Server 5.3.

This update has been rated as having low security impact by the Red Hat Security Response Team.

This update corrects several security vulnerabilities in the IBM Java Runtime Environment shipped as part of Red Hat Network Satellite Server 5.3. In a typical operating environment, these are of low security risk as the runtime is not used on untrusted applets.

Several flaws were fixed in the IBM Java 2 Runtime Environment.
(CVE-2009-0217, CVE-2009-1093, CVE-2009-1094, CVE-2009-1095, CVE-2009-1096, CVE-2009-1097, CVE-2009-1098, CVE-2009-1099, CVE-2009-1100, CVE-2009-1101, CVE-2009-1103, CVE-2009-1104, CVE-2009-1105, CVE-2009-1106, CVE-2009-1107, CVE-2009-2625, CVE-2009-2670, CVE-2009-2671, CVE-2009-2672, CVE-2009-2673, CVE-2009-2674, CVE-2009-2675, CVE-2009-2676, CVE-2009-3865, CVE-2009-3866, CVE-2009-3867, CVE-2009-3868, CVE-2009-3869, CVE-2009-3871, CVE-2009-3872, CVE-2009-3873, CVE-2009-3874, CVE-2009-3875, CVE-2009-3876, CVE-2009-3877)

Users of Red Hat Network Satellite Server 5.3 are advised to upgrade to these updated java-1.6.0-ibm packages, which resolve these issues.
For this update to take effect, Red Hat Network Satellite Server must be restarted ('/usr/sbin/rhn-satellite restart'), as well as all running instances of IBM Java.

IBM Java 6 was updated to Service Refresh 7.

The following security issues were fixed :

  - A vulnerability in the Java Runtime Environment with     decoding DER encoded data might allow a remote client to     cause the JRE to crash, resulting in a denial of service     condition. (CVE-2009-3876 / CVE-2009-3877)

  - A buffer overflow vulnerability in the Java Runtime     Environment audio system might allow an untrusted applet     or Java Web Start application to escalate privileges.
    For example, an untrusted applet might grant itself     permissions to read and write local files, or run local     applications that are accessible to the user running the     untrusted applet. (CVE-2009-3867)

  - A buffer overflow vulnerability in the Java Runtime     Environment with parsing image files might allow an     untrusted applet or Java Web Start application to     escalate privileges. For example, an untrusted applet     might grant itself permissions to read and write local     files, or run local applications that are accessible to     the user running the untrusted applet. (CVE-2009-3868)

  - An integer overflow vulnerability in the Java Runtime     Environment with reading JPEG files might allow an     untrusted applet or Java Web Start application to     escalate privileges. For example, an untrusted applet     might grant itself permissions to read and write local     files, or run local applications that are accessible to     the user running the untrusted applet. (CVE-2009-3872)

  - A buffer overflow vulnerability in the Java Runtime     Environment with processing JPEG files might allow an     untrusted applet or Java Web Start application to     escalate privileges. For example, an untrusted applet     might grant itself permissions to read and write local     files, or run local applications that are accessible to     the user running the untrusted applet. (CVE-2009-3873)

  - A security vulnerability in the Java Runtime Environment     with verifying HMAC digests might allow authentication     to be bypassed. This action can allow a user to forge a     digital signature that would be accepted as valid.
    Applications that validate HMAC-based digital signatures     might be vulnerable to this type of attack.
    (CVE-2009-3875)

  - A command execution vulnerability in the Java Runtime     Environment Deployment Toolkit might be used to run     arbitrary code. This issue might occur as the result of     a user of the Java Runtime Environment viewing a     specially crafted web page that exploits this     vulnerability. (CVE-2009-3865)

  - A buffer overflow vulnerability in the Java Runtime     Environment with processing image files might allow an     untrusted applet or Java Web Start application to     escalate privileges. For example, an untrusted applet     might grant itself permissions to read and write local     files or run local applications that are accessible to     the user running the untrusted applet. (CVE-2009-3869)

  - A buffer overflow vulnerability in the Java Runtime     Environment with processing image files might allow an     untrusted applet or Java Web Start application to     escalate privileges. For example, an untrusted applet     might grant itself permissions to read and write local     files or run local applications that are accessible to     the user running the untrusted applet. (CVE-2009-3871)

  - A security vulnerability in the Java Web Start Installer     might be used to allow an untrusted Java Web Start     application to run as a trusted application and run     arbitrary code. This issue might occur as the result of     a user of the Java Runtime Environment viewing a     specially crafted web page that exploits this     vulnerability. (CVE-2009-3866)

  - An integer overflow vulnerability in the Java Runtime     Environment with processing JPEG images might allow an     untrusted applet or Java Web Start application to     escalate privileges. For example, an untrusted applet     might grant itself permissions to read and write local     files or run local applications that are accessible to     the user running the untrusted applet. (CVE-2009-3874)

  - A vulnerability with verifying HMAC-based XML digital     signatures in the XML Digital Signature implementation     included with the Java Runtime Environment (JRE) might     allow authentication to be bypassed. Applications that     validate HMAC-based XML digital signatures might be     vulnerable to this type of attack. (CVE-2009-0217)

Note: This vulnerability cannot be exploited by an untrusted applet or Java Web Start application.

The version of OpenOffice installed on the remote host is earlier than 3.2.  Such versions are potentially affected by several issues : 

  - Signatures may not be handled properly due to a vulnerability in the libxml2 library. (CVE-2006-4339)

  - There is an HMAC truncation authentication bypass vulnerability in the libxmlsec library. (CVE-2009-0217)

  - The application is bundled with a vulnerable version of the Microsoft VC++ runtime. (CVE-2009-2493)

  - Specially crafted XPM files are not processed properly, which could lead to arbitrary code execution. (CVE-2009-2949)

  - Specially crafted GIF files are not processed properly, which could lead to arbitrary code execution. (CVE-2009-2950)

  - Specially crafted Microsoft Word documents are not processed properly, which could lead to arbitrary code execution. (CVE-2009-3301 / CVE-2009-3302)

ID	名稱	產品	系列	已發布	已更新	嚴重性
44029	RHEL 4 / 5 : IBM Java Runtime in Satellite Server (RHSA-2010:0043)	Nessus	Red Hat Local Security Checks	2010/1/15	2021/1/14	critical
43872	SuSE 11 Security Update : IBM Java 1.6.0 (SAT Patch Number 1748)	Nessus	SuSE Local Security Checks	2010/1/13	2021/1/14	high
5339	OpenOffice < 3.2 Multiple Vulnerabilities	Nessus Network Monitor	Generic	2010/2/15	2019/3/6	medium

偵測

搜尋 Plugin

critical

high

medium