Red Hat RHSA-2009:1201: java-1.6.0-openjdk Multiple Vulnerabilities Fix

Vulnerability Key Information Advisory ID: RHSA-2009:1201 Release Date: 2009-08-06 Update Date: 2009-08-06 Type/Severity: Security Advisory - Important Vulnerability Description This update fixes multiple security issues and one bug in the package, applicable to Red Hat Enterprise Linux 5. Vulnerability Details CVE-2009-0217: Defect in HMAC-based XML signature processing in XML signature implementation. CVE-2009-2475: Information disclosure via mutable static variables. CVE-2009-2476: OpenType validation can be bypassed. CVE-2009-2625: Denial of service vulnerability in XML processing. CVE-2009-2670: Vulnerability in JRE audio system allowing reading of restricted system properties. CVE-2009-2671 and CVE-2009-2672: Flaws in JRE proxy implementation. CVE-2009-2673: Proxy mechanism allows unauthorized socket or URL connections. CVE-2009-2674: Integer overflow when processing JPEG images. CVE-2009-2675: Integer overflow in unpack200 functionality. CVE-2009-2689: JDK13Services grants unnecessary privileges. CVE-2009-2690: Information disclosure in private Java variable handling. Affected Products Red Hat Enterprise Linux Server 5 x86_64 Red Hat Enterprise Linux Server 5 i386 Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.3 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.3 i386 Red Hat Enterprise Linux Server - AUS 5.3 x86_64 Red Hat Enterprise Linux Server - AUS 5.3 i386 Red Hat Enterprise Linux Workstation 5 x86_64 Red Hat Enterprise Linux Workstation 5 i386 Red Hat Enterprise Linux Desktop 5 x86_64 Red Hat Enterprise Linux Desktop 5 i386 Red Hat Enterprise Linux Server from RHUI 5 x86_64 Red Hat Enterprise Linux Server from RHUI 5 i386 Solution All users of should upgrade to these updated packages to resolve these issues. References Red Hat Security Update Classification Sun Blog: Advance Notification of Security Updates

Goal Reached Thanks to every supporter — we hit 100%!

Red Hat RHSA-2009:1201: java-1.6.0-openjdk Multiple Vulnerabilities Fix