(RHSA-2011:0290) Moderate: java-1.6.0-ibm security update

2011-02-2200:00:00

access.redhat.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.041 Low

EPSS

Percentile

91.2%

JSON

The IBM 1.6.0 Java release includes the IBM Java 2 Runtime Environment and
the IBM Java 2 Software Development Kit.

A denial of service flaw was found in the way certain strings were
converted to Double objects. A remote attacker could use this flaw to cause
Java based applications to hang, for example, if they parsed Double values
in a specially-crafted HTTP request. (CVE-2010-4476)

All users of java-1.6.0-ibm are advised to upgrade to these updated
packages, containing the IBM 1.6.0 SR9 Java release. All running instances
of IBM Java must be restarted for the update to take effect.

OSVersionArchitecturePackageVersionFilename
RedHat5x86_64java-1.6.0-ibm-javacomm< 1.6.0.9.0-1jpp.4.el5java-1.6.0-ibm-javacomm-1.6.0.9.0-1jpp.4.el5.x86_64.rpm
RedHat5ppcjava-1.6.0-ibm-javacomm< 1.6.0.9.0-1jpp.4.el5java-1.6.0-ibm-javacomm-1.6.0.9.0-1jpp.4.el5.ppc.rpm
RedHat5i386java-1.6.0-ibm-plugin< 1.6.0.9.0-1jpp.4.el5java-1.6.0-ibm-plugin-1.6.0.9.0-1jpp.4.el5.i386.rpm
RedHat5i386java-1.6.0-ibm-jdbc< 1.6.0.9.0-1jpp.4.el5java-1.6.0-ibm-jdbc-1.6.0.9.0-1jpp.4.el5.i386.rpm
RedHat6s390xjava-1.6.0-ibm-devel< 1.6.0.9.0-1jpp.5.el6java-1.6.0-ibm-devel-1.6.0.9.0-1jpp.5.el6.s390x.rpm
RedHat5x86_64java-1.6.0-ibm-src< 1.6.0.9.0-1jpp.4.el5java-1.6.0-ibm-src-1.6.0.9.0-1jpp.4.el5.x86_64.rpm
RedHat6i686java-1.6.0-ibm-jdbc< 1.6.0.9.0-1jpp.5.el6java-1.6.0-ibm-jdbc-1.6.0.9.0-1jpp.5.el6.i686.rpm
RedHat5ppc64java-1.6.0-ibm-jdbc< 1.6.0.9.0-1jpp.4.el5java-1.6.0-ibm-jdbc-1.6.0.9.0-1jpp.4.el5.ppc64.rpm
RedHat5ppcjava-1.6.0-ibm< 1.6.0.9.0-1jpp.4.el5java-1.6.0-ibm-1.6.0.9.0-1jpp.4.el5.ppc.rpm
RedHat6ppc64java-1.6.0-ibm-src< 1.6.0.9.0-1jpp.5.el6java-1.6.0-ibm-src-1.6.0.9.0-1jpp.5.el6.ppc64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	5	x86_64	java-1.6.0-ibm-javacomm	< 1.6.0.9.0-1jpp.4.el5	java-1.6.0-ibm-javacomm-1.6.0.9.0-1jpp.4.el5.x86_64.rpm
RedHat	5	ppc	java-1.6.0-ibm-javacomm	< 1.6.0.9.0-1jpp.4.el5	java-1.6.0-ibm-javacomm-1.6.0.9.0-1jpp.4.el5.ppc.rpm
RedHat	5	i386	java-1.6.0-ibm-plugin	< 1.6.0.9.0-1jpp.4.el5	java-1.6.0-ibm-plugin-1.6.0.9.0-1jpp.4.el5.i386.rpm
RedHat	5	i386	java-1.6.0-ibm-jdbc	< 1.6.0.9.0-1jpp.4.el5	java-1.6.0-ibm-jdbc-1.6.0.9.0-1jpp.4.el5.i386.rpm
RedHat	6	s390x	java-1.6.0-ibm-devel	< 1.6.0.9.0-1jpp.5.el6	java-1.6.0-ibm-devel-1.6.0.9.0-1jpp.5.el6.s390x.rpm
RedHat	5	x86_64	java-1.6.0-ibm-src	< 1.6.0.9.0-1jpp.4.el5	java-1.6.0-ibm-src-1.6.0.9.0-1jpp.4.el5.x86_64.rpm
RedHat	6	i686	java-1.6.0-ibm-jdbc	< 1.6.0.9.0-1jpp.5.el6	java-1.6.0-ibm-jdbc-1.6.0.9.0-1jpp.5.el6.i686.rpm
RedHat	5	ppc64	java-1.6.0-ibm-jdbc	< 1.6.0.9.0-1jpp.4.el5	java-1.6.0-ibm-jdbc-1.6.0.9.0-1jpp.4.el5.ppc64.rpm
RedHat	5	ppc	java-1.6.0-ibm	< 1.6.0.9.0-1jpp.4.el5	java-1.6.0-ibm-1.6.0.9.0-1jpp.4.el5.ppc.rpm
RedHat	6	ppc64	java-1.6.0-ibm-src	< 1.6.0.9.0-1jpp.5.el6	java-1.6.0-ibm-src-1.6.0.9.0-1jpp.5.el6.ppc64.rpm