Oval Definition:oval:com.redhat.rhsa:def:20091571
Revision Date:2009-11-10Version:602
Title:RHSA-2009:1571: java-1.5.0-sun security update (Critical)
Description:The Sun 1.5.0 Java release includes the Sun Java 5 Runtime Environment and the Sun Java 5 Software Development Kit.

  • This update fixes several vulnerabilities in the Sun Java 5 Runtime Environment and the Sun Java 5 Software Development Kit. These vulnerabilities are summarized on the "Advance notification of Security Updates for Java SE" page from Sun Microsystems, listed in the References section. (CVE-2009-2409, CVE-2009-3728, CVE-2009-3873, CVE-2009-3876, CVE-2009-3877, CVE-2009-3879, CVE-2009-3880, CVE-2009-3881, CVE-2009-3882, CVE-2009-3883, CVE-2009-3884)

    Note: This is the final update for the java-1.5.0-sun packages, as the Sun Java SE Release family 5.0 has now reached End of Service Life. The next update will remove the java-1.5.0-sun packages.

    An alternative to Sun Java SE 5.0 is the Java 2 Technology Edition of the IBM Developer Kit for Linux, which is available from the Extras and Supplementary channels on the Red Hat Network. For users of applications that are capable of using the Java 6 runtime, the OpenJDK open source JDK is included in Red Hat Enterprise Linux 5 (since 5.3) and is supported by Red Hat.

    Users of java-1.5.0-sun should upgrade to these updated packages, which correct these issues. All running instances of Sun Java must be restarted for the update to take effect.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2009-2409
    CVE-2009-3728
    CVE-2009-3867
    CVE-2009-3868
    CVE-2009-3869
    CVE-2009-3871
    CVE-2009-3873
    CVE-2009-3874
    CVE-2009-3875
    CVE-2009-3876
    CVE-2009-3877
    CVE-2009-3879
    CVE-2009-3880
    CVE-2009-3881
    CVE-2009-3882
    CVE-2009-3883
    CVE-2009-3884
    RHSA-2009:1571-01
    Platform(s):Supplementary for Red Hat Enterprise Linux 5
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux 5 is installed
  • AND Package Information
  • java-1.5.0-sun is earlier than 0:1.5.0.22-1jpp.1.el5
  • AND java-1.5.0-sun is signed with Red Hat redhatrelease key
  • OR
  • java-1.5.0-sun-demo is earlier than 0:1.5.0.22-1jpp.1.el5
  • AND java-1.5.0-sun-demo is signed with Red Hat redhatrelease key
  • OR
  • java-1.5.0-sun-devel is earlier than 0:1.5.0.22-1jpp.1.el5
  • AND java-1.5.0-sun-devel is signed with Red Hat redhatrelease key
  • OR
  • java-1.5.0-sun-jdbc is earlier than 0:1.5.0.22-1jpp.1.el5
  • AND java-1.5.0-sun-jdbc is signed with Red Hat redhatrelease key
  • OR
  • java-1.5.0-sun-plugin is earlier than 0:1.5.0.22-1jpp.1.el5
  • AND java-1.5.0-sun-plugin is signed with Red Hat redhatrelease key
  • OR
  • java-1.5.0-sun-src is earlier than 0:1.5.0.22-1jpp.1.el5
  • AND java-1.5.0-sun-src is signed with Red Hat redhatrelease key
  • BACK