Updated java-1.7.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary.
The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
IBM Java SE version 7 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security alerts page, listed in the References section. (CVE-2012-1541, CVE-2012-3174, CVE-2012-3213, CVE-2012-3342, CVE-2013-0351, CVE-2013-0409, CVE-2013-0419, CVE-2013-0422, CVE-2013-0423, CVE-2013-0424, CVE-2013-0425, CVE-2013-0426, CVE-2013-0427, CVE-2013-0428, CVE-2013-0431, CVE-2013-0432, CVE-2013-0433, CVE-2013-0434, CVE-2013-0435, CVE-2013-0437, CVE-2013-0438, CVE-2013-0440, CVE-2013-0441, CVE-2013-0442, CVE-2013-0443, CVE-2013-0444, CVE-2013-0445, CVE-2013-0446, CVE-2013-0449, CVE-2013-0450, CVE-2013-0809, CVE-2013-1473, CVE-2013-1476, CVE-2013-1478, CVE-2013-1480, CVE-2013-1484, CVE-2013-1485, CVE-2013-1486, CVE-2013-1487, CVE-2013-1493)
All users of java-1.7.0-ibm are advised to upgrade to these updated packages, containing the IBM Java SE 7 SR4 release. All running instances of IBM Java must be restarted for the update to take effect.
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Red Hat Security Advisory RHSA-2013:0626. The text
# itself is copyright (C) Red Hat, Inc.
#
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description)
{
script_id(65204);
script_version("1.38");
script_set_attribute(attribute:"plugin_modification_date", value:"2022/05/25");
script_cve_id(
"CVE-2012-1541",
"CVE-2012-3174",
"CVE-2012-3213",
"CVE-2012-3342",
"CVE-2012-5085",
"CVE-2013-0351",
"CVE-2013-0409",
"CVE-2013-0419",
"CVE-2013-0422",
"CVE-2013-0423",
"CVE-2013-0424",
"CVE-2013-0425",
"CVE-2013-0426",
"CVE-2013-0427",
"CVE-2013-0428",
"CVE-2013-0431",
"CVE-2013-0432",
"CVE-2013-0433",
"CVE-2013-0434",
"CVE-2013-0435",
"CVE-2013-0437",
"CVE-2013-0438",
"CVE-2013-0440",
"CVE-2013-0441",
"CVE-2013-0442",
"CVE-2013-0443",
"CVE-2013-0444",
"CVE-2013-0445",
"CVE-2013-0446",
"CVE-2013-0449",
"CVE-2013-0450",
"CVE-2013-0809",
"CVE-2013-1473",
"CVE-2013-1476",
"CVE-2013-1478",
"CVE-2013-1480",
"CVE-2013-1484",
"CVE-2013-1485",
"CVE-2013-1486",
"CVE-2013-1487",
"CVE-2013-1493"
);
script_bugtraq_id(
57246,
57312,
57681,
57686,
57687,
57689,
57691,
57692,
57696,
57697,
57699,
57700,
57701,
57702,
57703,
57704,
57708,
57709,
57711,
57712,
57713,
57714,
57715,
57716,
57717,
57719,
57720,
57724,
57726,
57727,
57728,
57729,
57730,
57731,
58027,
58028,
58029,
58031,
58238,
58296
);
script_xref(name:"RHSA", value:"2013:0626");
script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2022/06/15");
script_name(english:"RHEL 5 / 6 : java-1.7.0-ibm (RHSA-2013:0626)");
script_set_attribute(attribute:"synopsis", value:
"The remote Red Hat host is missing one or more security updates.");
script_set_attribute(attribute:"description", value:
"Updated java-1.7.0-ibm packages that fix several security issues are
now available for Red Hat Enterprise Linux 5 and 6 Supplementary.
The Red Hat Security Response Team has rated this update as having
critical security impact. Common Vulnerability Scoring System (CVSS)
base scores, which give detailed severity ratings, are available for
each vulnerability from the CVE links in the References section.
IBM Java SE version 7 includes the IBM Java Runtime Environment and
the IBM Java Software Development Kit.
This update fixes several vulnerabilities in the IBM Java Runtime
Environment and the IBM Java Software Development Kit. Detailed
vulnerability descriptions are linked from the IBM Security alerts
page, listed in the References section. (CVE-2012-1541, CVE-2012-3174,
CVE-2012-3213, CVE-2012-3342, CVE-2013-0351, CVE-2013-0409,
CVE-2013-0419, CVE-2013-0422, CVE-2013-0423, CVE-2013-0424,
CVE-2013-0425, CVE-2013-0426, CVE-2013-0427, CVE-2013-0428,
CVE-2013-0431, CVE-2013-0432, CVE-2013-0433, CVE-2013-0434,
CVE-2013-0435, CVE-2013-0437, CVE-2013-0438, CVE-2013-0440,
CVE-2013-0441, CVE-2013-0442, CVE-2013-0443, CVE-2013-0444,
CVE-2013-0445, CVE-2013-0446, CVE-2013-0449, CVE-2013-0450,
CVE-2013-0809, CVE-2013-1473, CVE-2013-1476, CVE-2013-1478,
CVE-2013-1480, CVE-2013-1484, CVE-2013-1485, CVE-2013-1486,
CVE-2013-1487, CVE-2013-1493)
All users of java-1.7.0-ibm are advised to upgrade to these updated
packages, containing the IBM Java SE 7 SR4 release. All running
instances of IBM Java must be restarted for the update to take effect.");
script_set_attribute(attribute:"see_also", value:"https://developer.ibm.com/javasdk/support/security-vulnerabilities/");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/errata/RHSA-2013:0626");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2012-5085");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2012-3174");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0422");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-1478");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0450");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-1473");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-1476");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2012-1541");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0409");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-1480");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0427");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0426");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0425");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0424");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0423");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2012-3213");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0419");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0445");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0446");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0441");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0440");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0443");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0442");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0351");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2012-3342");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0432");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0433");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0434");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0435");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0438");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0428");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0444");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0449");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0431");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0437");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-1486");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-1484");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-1485");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-1487");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-1493");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2013-0809");
script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
script_set_cvss_temporal_vector("CVSS2#E:H/RL:OF/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2013-1493");
script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
script_set_attribute(attribute:"exploit_available", value:"true");
script_set_attribute(attribute:"exploit_framework_core", value:"true");
script_set_attribute(attribute:"exploited_by_malware", value:"true");
script_set_attribute(attribute:"metasploit_name", value:'Java Applet JMX Remote Code Execution');
script_set_attribute(attribute:"exploit_framework_metasploit", value:"true");
script_set_attribute(attribute:"exploit_framework_canvas", value:"true");
script_set_attribute(attribute:"canvas_package", value:"CANVAS");
script_set_attribute(attribute:"vuln_publication_date", value:"2012/10/16");
script_set_attribute(attribute:"patch_publication_date", value:"2013/03/11");
script_set_attribute(attribute:"plugin_publication_date", value:"2013/03/12");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:java-1.7.0-ibm");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:java-1.7.0-ibm-demo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:java-1.7.0-ibm-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:java-1.7.0-ibm-jdbc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:java-1.7.0-ibm-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:java-1.7.0-ibm-src");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:5.9");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:6");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:6.4");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:6.5");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Red Hat Local Security Checks");
script_copyright(english:"This script is Copyright (C) 2013-2022 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("misc_func.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Red Hat" >!< release) audit(AUDIT_OS_NOT, "Red Hat");
os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Red Hat");
os_ver = os_ver[1];
if (! preg(pattern:"^(5\.9|6)([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Red Hat 5.9 / 6.x", "Red Hat " + os_ver);
if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "s390" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Red Hat", cpu);
yum_updateinfo = get_kb_item("Host/RedHat/yum-updateinfo");
if (!empty_or_null(yum_updateinfo))
{
rhsa = "RHSA-2013:0626";
yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);
if (!empty_or_null(yum_report))
{
security_report_v4(
port : 0,
severity : SECURITY_HOLE,
extra : yum_report
);
exit(0);
}
else
{
audit_message = "affected by Red Hat security advisory " + rhsa;
audit(AUDIT_OS_NOT, audit_message);
}
}
else
{
flag = 0;
if (rpm_check(release:"RHEL5", sp:"9", reference:"java-1.7.0-ibm-1.7.0.4.0-1jpp.2.el5_9")) flag++;
if (rpm_check(release:"RHEL5", sp:"9", reference:"java-1.7.0-ibm-demo-1.7.0.4.0-1jpp.2.el5_9")) flag++;
if (rpm_check(release:"RHEL5", sp:"9", reference:"java-1.7.0-ibm-devel-1.7.0.4.0-1jpp.2.el5_9")) flag++;
if (rpm_check(release:"RHEL5", sp:"9", reference:"java-1.7.0-ibm-jdbc-1.7.0.4.0-1jpp.2.el5_9")) flag++;
if (rpm_check(release:"RHEL5", sp:"9", cpu:"i386", reference:"java-1.7.0-ibm-plugin-1.7.0.4.0-1jpp.2.el5_9")) flag++;
if (rpm_check(release:"RHEL5", sp:"9", cpu:"x86_64", reference:"java-1.7.0-ibm-plugin-1.7.0.4.0-1jpp.2.el5_9")) flag++;
if (rpm_check(release:"RHEL5", sp:"9", reference:"java-1.7.0-ibm-src-1.7.0.4.0-1jpp.2.el5_9")) flag++;
if (rpm_check(release:"RHEL6", cpu:"i686", reference:"java-1.7.0-ibm-1.7.0.4.0-1jpp.2.el6_4")) flag++;
if (rpm_check(release:"RHEL6", cpu:"s390x", reference:"java-1.7.0-ibm-1.7.0.4.0-1jpp.2.el6_4")) flag++;
if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"java-1.7.0-ibm-1.7.0.4.0-1jpp.2.el6_4")) flag++;
if (rpm_check(release:"RHEL6", cpu:"i686", reference:"java-1.7.0-ibm-demo-1.7.0.4.0-1jpp.2.el6_4")) flag++;
if (rpm_check(release:"RHEL6", cpu:"s390x", reference:"java-1.7.0-ibm-demo-1.7.0.4.0-1jpp.2.el6_4")) flag++;
if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"java-1.7.0-ibm-demo-1.7.0.4.0-1jpp.2.el6_4")) flag++;
if (rpm_check(release:"RHEL6", cpu:"i686", reference:"java-1.7.0-ibm-devel-1.7.0.4.0-1jpp.2.el6_4")) flag++;
if (rpm_check(release:"RHEL6", cpu:"s390x", reference:"java-1.7.0-ibm-devel-1.7.0.4.0-1jpp.2.el6_4")) flag++;
if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"java-1.7.0-ibm-devel-1.7.0.4.0-1jpp.2.el6_4")) flag++;
if (rpm_check(release:"RHEL6", cpu:"i686", reference:"java-1.7.0-ibm-jdbc-1.7.0.4.0-1jpp.2.el6_4")) flag++;
if (rpm_check(release:"RHEL6", cpu:"s390x", reference:"java-1.7.0-ibm-jdbc-1.7.0.4.0-1jpp.2.el6_4")) flag++;
if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"java-1.7.0-ibm-jdbc-1.7.0.4.0-1jpp.2.el6_4")) flag++;
if (rpm_check(release:"RHEL6", cpu:"i686", reference:"java-1.7.0-ibm-plugin-1.7.0.4.0-1jpp.2.el6_4")) flag++;
if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"java-1.7.0-ibm-plugin-1.7.0.4.0-1jpp.2.el6_4")) flag++;
if (rpm_check(release:"RHEL6", cpu:"i686", reference:"java-1.7.0-ibm-src-1.7.0.4.0-1jpp.2.el6_4")) flag++;
if (rpm_check(release:"RHEL6", cpu:"s390x", reference:"java-1.7.0-ibm-src-1.7.0.4.0-1jpp.2.el6_4")) flag++;
if (rpm_check(release:"RHEL6", cpu:"x86_64", reference:"java-1.7.0-ibm-src-1.7.0.4.0-1jpp.2.el6_4")) flag++;
if (flag)
{
security_report_v4(
port : 0,
severity : SECURITY_HOLE,
extra : rpm_report_get() + redhat_report_package_caveat()
);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "java-1.7.0-ibm / java-1.7.0-ibm-demo / java-1.7.0-ibm-devel / etc");
}
}
Vendor | Product | Version | CPE |
---|---|---|---|
redhat | enterprise_linux | java-1.7.0-ibm | p-cpe:/a:redhat:enterprise_linux:java-1.7.0-ibm |
redhat | enterprise_linux | java-1.7.0-ibm-demo | p-cpe:/a:redhat:enterprise_linux:java-1.7.0-ibm-demo |
redhat | enterprise_linux | java-1.7.0-ibm-devel | p-cpe:/a:redhat:enterprise_linux:java-1.7.0-ibm-devel |
redhat | enterprise_linux | java-1.7.0-ibm-jdbc | p-cpe:/a:redhat:enterprise_linux:java-1.7.0-ibm-jdbc |
redhat | enterprise_linux | java-1.7.0-ibm-plugin | p-cpe:/a:redhat:enterprise_linux:java-1.7.0-ibm-plugin |
redhat | enterprise_linux | java-1.7.0-ibm-src | p-cpe:/a:redhat:enterprise_linux:java-1.7.0-ibm-src |
redhat | enterprise_linux | 5.9 | cpe:/o:redhat:enterprise_linux:5.9 |
redhat | enterprise_linux | 6 | cpe:/o:redhat:enterprise_linux:6 |
redhat | enterprise_linux | 6.4 | cpe:/o:redhat:enterprise_linux:6.4 |
redhat | enterprise_linux | 6.5 | cpe:/o:redhat:enterprise_linux:6.5 |
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1541
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3174
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3213
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3342
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5085
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0351
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0409
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0419
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0422
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0423
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0424
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0425
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0426
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0427
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0428
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0431
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0432
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0433
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0434
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0435
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0437
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0438
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0440
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0441
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0442
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0443
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0444
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0445
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0446
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0449
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0450
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0809
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1473
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1476
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1478
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1480
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1484
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1485
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1486
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1487
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1493
access.redhat.com/errata/RHSA-2013:0626
access.redhat.com/security/cve/cve-2012-1541
access.redhat.com/security/cve/cve-2012-3174
access.redhat.com/security/cve/cve-2012-3213
access.redhat.com/security/cve/cve-2012-3342
access.redhat.com/security/cve/cve-2012-5085
access.redhat.com/security/cve/cve-2013-0351
access.redhat.com/security/cve/cve-2013-0409
access.redhat.com/security/cve/cve-2013-0419
access.redhat.com/security/cve/cve-2013-0422
access.redhat.com/security/cve/cve-2013-0423
access.redhat.com/security/cve/cve-2013-0424
access.redhat.com/security/cve/cve-2013-0425
access.redhat.com/security/cve/cve-2013-0426
access.redhat.com/security/cve/cve-2013-0427
access.redhat.com/security/cve/cve-2013-0428
access.redhat.com/security/cve/cve-2013-0431
access.redhat.com/security/cve/cve-2013-0432
access.redhat.com/security/cve/cve-2013-0433
access.redhat.com/security/cve/cve-2013-0434
access.redhat.com/security/cve/cve-2013-0435
access.redhat.com/security/cve/cve-2013-0437
access.redhat.com/security/cve/cve-2013-0438
access.redhat.com/security/cve/cve-2013-0440
access.redhat.com/security/cve/cve-2013-0441
access.redhat.com/security/cve/cve-2013-0442
access.redhat.com/security/cve/cve-2013-0443
access.redhat.com/security/cve/cve-2013-0444
access.redhat.com/security/cve/cve-2013-0445
access.redhat.com/security/cve/cve-2013-0446
access.redhat.com/security/cve/cve-2013-0449
access.redhat.com/security/cve/cve-2013-0450
access.redhat.com/security/cve/cve-2013-0809
access.redhat.com/security/cve/cve-2013-1473
access.redhat.com/security/cve/cve-2013-1476
access.redhat.com/security/cve/cve-2013-1478
access.redhat.com/security/cve/cve-2013-1480
access.redhat.com/security/cve/cve-2013-1484
access.redhat.com/security/cve/cve-2013-1485
access.redhat.com/security/cve/cve-2013-1486
access.redhat.com/security/cve/cve-2013-1487
access.redhat.com/security/cve/cve-2013-1493
developer.ibm.com/javasdk/support/security-vulnerabilities/