RHSA-2009:1551Medium

Red Hat Security Advisory: java-1.4.2-ibm security update

Published
November 4, 2009
Last Modified
June 28, 2026

🔗 CVE IDs covered (8)

CVE-2008-5349 →CVE-2009-1100 →CVE-2009-2625 →CVE-2009-3868 →CVE-2009-3872 →CVE-2009-3873 →CVE-2009-3876 →CVE-2009-3877 →

📋 Description

CVE-2008-5349 — OpenJDK RSA public key length denial-of-service (6497740) CVE-2009-1100 — OpenJDK: DoS (disk consumption) via handling of temporary font files CVE-2009-2625 — JDK: XML parsing Denial-Of-Service (6845701) CVE-2009-3868 — java-1.6.0-sun: Privilege escalation via crafted image file due improper color profiles parsing (6862970) CVE-2009-3872 — JRE JPEG JFIF Decoder issue (6862969) CVE-2009-3873 — OpenJDK JPEG Image Writer quantization problem (6862968) CVE-2009-3876 — OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877 CVE-2009-3877 — OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877

🎯 Affected products12

  • RHEL 4 AS for SAP
  • RHEL 5 Server for SAP
  • java-1.4.2-ibm-0:1.4.2.13.2.sap-1jpp.4.el4_8.x86_64 as a component of RHEL 4 AS for SAP
  • java-1.4.2-ibm-0:1.4.2.13.2.sap-1jpp.4.el5_3.x86_64 as a component of RHEL 5 Server for SAP
  • java-1.4.2-ibm-demo-0:1.4.2.13.2.sap-1jpp.4.el4_8.x86_64 as a component of RHEL 4 AS for SAP
  • java-1.4.2-ibm-demo-0:1.4.2.13.2.sap-1jpp.4.el5_3.x86_64 as a component of RHEL 5 Server for SAP
  • java-1.4.2-ibm-devel-0:1.4.2.13.2.sap-1jpp.4.el4_8.x86_64 as a component of RHEL 4 AS for SAP
  • java-1.4.2-ibm-devel-0:1.4.2.13.2.sap-1jpp.4.el5_3.x86_64 as a component of RHEL 5 Server for SAP
  • java-1.4.2-ibm-javacomm-0:1.4.2.13.2.sap-1jpp.4.el4_8.x86_64 as a component of RHEL 4 AS for SAP
  • java-1.4.2-ibm-javacomm-0:1.4.2.13.2.sap-1jpp.4.el5_3.x86_64 as a component of RHEL 5 Server for SAP
  • java-1.4.2-ibm-src-0:1.4.2.13.2.sap-1jpp.4.el4_8.x86_64 as a component of RHEL 4 AS for SAP
  • java-1.4.2-ibm-src-0:1.4.2.13.2.sap-1jpp.4.el5_3.x86_64 as a component of RHEL 5 Server for SAP

✅ Remediation

Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

🔗 References (6)