RHSA-2009:1662Low

Red Hat Security Advisory: Red Hat Network Satellite Server Sun Java Runtime security update

Published
December 11, 2009
Last Modified
June 28, 2026

🔗 CVE IDs covered (32)

CVE-2006-2426 →CVE-2008-2086 →CVE-2009-1093 →CVE-2009-1094 →CVE-2009-1095 →CVE-2009-1096 →CVE-2009-1098 →CVE-2009-1099 →CVE-2009-1100 →CVE-2009-1103 →CVE-2009-1104 →CVE-2009-1107 →CVE-2009-2409 →CVE-2009-2475 →CVE-2009-2625 →CVE-2009-2670 →CVE-2009-2671 →CVE-2009-2672 →CVE-2009-2673 →CVE-2009-2675 →CVE-2009-2676 →CVE-2009-2689 →CVE-2009-3728 →CVE-2009-3873 →CVE-2009-3876 →CVE-2009-3877 →CVE-2009-3879 →CVE-2009-3880 →CVE-2009-3881 →CVE-2009-3882 →CVE-2009-3883 →CVE-2009-3884 →

📋 Description

CVE-2006-2426 — Untrusted applet causes DoS by filling up disk space CVE-2008-2086 — Java Web Start File Inclusion via System Properties Override CVE-2009-1093 — OpenJDK remote LDAP Denial-Of-Service (6717680) CVE-2009-1094 — OpenJDK LDAP client remote code execution (6737315) CVE-2009-1095 — OpenJDK Pack200 Buffer overflow vulnerability (6792554) CVE-2009-1096 — OpenJDK Pack200 Buffer overflow vulnerability (6792554) CVE-2009-1098 — OpenJDK GIF processing buffer overflow vulnerability (6804998) CVE-2009-1099 — OpenJDK: Type1 font processing buffer overflow vulnerability CVE-2009-1100 — OpenJDK: DoS (disk consumption) via handling of temporary font files CVE-2009-1103 — OpenJDK: Files disclosure, arbitrary code execution via "deserializing applets" (6646860) CVE-2009-1104 — OpenJDK: Intended access restrictions bypass via LiveConnect (6724331) CVE-2009-1107 — OpenJDK: Signed applet remote misuse possibility (6782871) CVE-2009-2409 — deprecate MD2 in SSL cert validation (Kaminsky) CVE-2009-2475 — OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167) CVE-2009-2625 — JDK: XML parsing Denial-Of-Service (6845701) CVE-2009-2670 — OpenJDK Untrusted applet System properties access (6738524) CVE-2009-2671 — OpenJDK Proxy mechanism information leaks (6801071) CVE-2009-2672 — OpenJDK Proxy mechanism information leaks (6801071) CVE-2009-2673 — OpenJDK proxy mechanism allows non-authorized socket connections (6801497) CVE-2009-2675 — Java Web Start Buffer unpack200 processing integer overflow (6830335) CVE-2009-2676 — JRE applet launcher vulnerability CVE-2009-2689 — OpenJDK JDK13Services grants unnecessary privileges (6777448) CVE-2009-3728 — OpenJDK ICC_Profile file existence detection information leak (6631533) CVE-2009-3873 — OpenJDK JPEG Image Writer quantization problem (6862968) CVE-2009-3876 — OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877 CVE-2009-3877 — OpenJDK ASN.1/DER input stream parser denial of service (6864911) CVE-2009-3877 CVE-2009-3879 — OpenJDK GraphicsConfiguration information leak(6822057) CVE-2009-3880 — OpenJDK UI logging information leakage(6664512) CVE-2009-3881 — OpenJDK resurrected classloaders can still have children (6636650) CVE-2009-3882 — OpenJDK information leaks in mutable variables (6657026,6657138) CVE-2009-3883 — OpenJDK information leaks in mutable variables (6657026,6657138) CVE-2009-3884 — OpenJDK zoneinfo file existence information leak (6824265)

🎯 Affected products5

  • Red Hat Satellite 5.1 (RHEL v.4 AS)
  • java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)
  • java-1.5.0-sun-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)
  • java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.i586 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)
  • java-1.5.0-sun-devel-0:1.5.0.22-1jpp.1.el4.x86_64 as a component of Red Hat Satellite 5.1 (RHEL v.4 AS)

✅ Remediation

Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Run the following commands to switch from Sun Java SE 5.0 to the Java 2 Technology Edition of the IBM Developer Kit for Linux: 1) up2date -i java-1.5.0-ibm java-1.5.0-ibm-devel dwr 2) service rhn-satellite stop 3) alternatives --set java /usr/lib/jvm/jre-1.5.0-ibm/bin/java 4) alternatives --set javac /usr/lib/jvm/java-1.5.0-ibm/bin/javac 5) service rhn-satellite start

🔗 References (32)