Java-1.6.0-Sun; Rhsa-2009:1200: Critical Security Update - Red Hat ENTERPRISE LINUX 5.4 - TECHNICAL NOTES Manual

Note: The flaws concerning applets in this advisory, CVE-2009-1095, CVE-2009-1096, and
CVE-2009-1102, can only be triggered in java-1.6.0-openjdk by calling the "appletviewer" application.
All users of java-1.6.0-openjdk are advised to upgrade to these updated packages, which resolve
these issues. All running instances of OpenJDK Java must be restarted for the update to take effect.

1.104. java-1.6.0-sun

1.104.1. RHSA-2009:1200: Critical security update

Important
This update has already been released (prior to the GA of this release) as the security
RHSA-2009:1200
errata
Updated java-1.6.0-sun packages that correct several security issues are now available for Red Hat
Enterprise Linux 4 Extras and 5 Supplementary.
This update has been rated as having critical security impact by the Red Hat Security Response
Team.
The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment and the Sun Java 6
Software Development Kit.
This update fixes several vulnerabilities in the Sun Java 6 Runtime Environment and the Sun Java
6 Software Development Kit. These vulnerabilities are summarized on the "Advance notification
of Security Updates for Java SE" page from Sun Microsystems, listed in the References section.
718
CVE-2009-2475
(CVE-2009-0217 ,
723
CVE-2009-2671 CVE-2009-2672
,
728
CVE-2009-2676 CVE-2009-2690
,
Users of java-1.6.0-sun should upgrade to these updated packages, which correct these issues. All
running instances of Sun Java must be restarted for the update to take effect.
718
https://www.redhat.com/security/data/cve/CVE-2009-0217.html
719
https://www.redhat.com/security/data/cve/CVE-2009-2475.html
720
https://www.redhat.com/security/data/cve/CVE-2009-2476.html
721
https://www.redhat.com/security/data/cve/CVE-2009-2625.html
722
https://www.redhat.com/security/data/cve/CVE-2009-2670.html
723
https://www.redhat.com/security/data/cve/CVE-2009-2671.html
724
https://www.redhat.com/security/data/cve/CVE-2009-2672.html
725
https://www.redhat.com/security/data/cve/CVE-2009-2673.html
726
https://www.redhat.com/security/data/cve/CVE-2009-2674.html
727
https://www.redhat.com/security/data/cve/CVE-2009-2675.html
728
https://www.redhat.com/security/data/cve/CVE-2009-2676.html
729
https://www.redhat.com/security/data/cve/CVE-2009-2690.html
717
719 720
CVE-2009-2476
,
724 725
CVE-2009-2673
,
729
)
721
CVE-2009-2625 CVE-2009-2670
, ,
726
CVE-2009-2674 CVE-2009-2675
, ,
java-1.6.0-sun
722
,
727
,
109