Rhsa-2009:1038: Critical Security Update - Red Hat ENTERPRISE LINUX 5.4 - TECHNICAL NOTES Manual

Chapter 1. Package Updates
Users of java-1.4.2-ibm may install these new 1.5.0 packages in parallel and switch between the new
and old Java environments using the alternatives tool.

1.100.2. RHSA-2009:1038: Critical security update

Important
This update has already been released (prior to the GA of this release) as the security
RHSA-2009:1038
errata
Updated java-1.5.0-ibm packages that fix several security issues are now available for Red Hat
Enterprise Linux 4 Extras and 5 Supplementary.
This update has been rated as having critical security impact by the Red Hat Security Response
Team.
The IBM 1.5.0 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2
Software Development Kit.
This update fixes several vulnerabilities in the IBM Java 2 Runtime Environment and the IBM Java
2 Software Development Kit. These vulnerabilities are summarized on the IBM "Security alerts"
page listed in the References section.
632
CVE-2009-1096 CVE-2009-1097
,
637
CVE-2009-1101 CVE-2009-1103
,
642
CVE-2009-1107
)
All users of java-1.5.0-ibm are advised to upgrade to these updated packages, containing the IBM
1.5.0 SR9-SSU Java release. All running instances of IBM Java must be restarted for this update to
take effect.
629
https://www.redhat.com/security/data/cve/CVE-2009-1093.html
630
https://www.redhat.com/security/data/cve/CVE-2009-1094.html
631
https://www.redhat.com/security/data/cve/CVE-2009-1095.html
632
https://www.redhat.com/security/data/cve/CVE-2009-1096.html
633
https://www.redhat.com/security/data/cve/CVE-2009-1097.html
634
https://www.redhat.com/security/data/cve/CVE-2009-1098.html
635
https://www.redhat.com/security/data/cve/CVE-2009-1099.html
636
https://www.redhat.com/security/data/cve/CVE-2009-1100.html
637
https://www.redhat.com/security/data/cve/CVE-2009-1101.html
638
https://www.redhat.com/security/data/cve/CVE-2009-1103.html
639
https://www.redhat.com/security/data/cve/CVE-2009-1104.html
640
https://www.redhat.com/security/data/cve/CVE-2009-1105.html
641
https://www.redhat.com/security/data/cve/CVE-2009-1106.html
642
https://www.redhat.com/security/data/cve/CVE-2009-1107.html
102
628
629
(CVE-2009-1093 ,
633 634
CVE-2009-1098
,
638 639
CVE-2009-1104
,
630
CVE-2009-1094 CVE-2009-1095
,
635
CVE-2009-1099 CVE-2009-1100
, ,
640
CVE-2009-1105 CVE-2009-1106
, ,
631
,
636
,
641
,