RHSA-2009:1236: Critical: java-1.5.0-ibm security update

Published Aug 28, 2009
·
Updated

The IBM 1.5.0 Java release includes the IBM Java 2 Runtime Environment andthe IBM Java 2 Software Development Kit.This update fixes several vulnerabilities in the IBM Java 2 RuntimeEnvironment and the IBM Java 2 Software Development Kit. Thesevulnerabilities are summarized on the IBM "Security alerts" page listed inthe References section. (CVE-2009-2625, CVE-2009-2670, CVE-2009-2671,CVE-2009-2672, CVE-2009-2673, CVE-2009-2675)All users of java-1.5.0-ibm are advised to upgrade to these updatedpackages, containing the IBM 1.5.0 SR10 Java release. All running instancesof IBM Java must be restarted for this update to take effect.Note: The packages included in this update are identical to the packagesmade available by RHEA-2009:1208 and RHEA-2009:1210 on the 13th ofAugust 2009. These packages are being reissued as a Red Hat SecurityAdvisory as they fixed a number of security issues that were not madepublic until after those errata were released. Since the packages areidentical, there is no need to install this update if RHEA-2009:1208 orRHEA-2009:1210 has already been installed.

Affected Software

14 affected componentsFixes available
redhat/java<1.5.0-ibm-1.5.0.10-1jpp.4.el5
1.5.0-ibm-1.5.0.10-1jpp.4.el5
redhat/java<1.5.0-ibm-1.5.0.10-1jpp.4.el5
1.5.0-ibm-1.5.0.10-1jpp.4.el5
redhat/java<1.5.0-ibm-accessibility-1.5.0.10-1jpp.4.el5
1.5.0-ibm-accessibility-1.5.0.10-1jpp.4.el5
redhat/java<1.5.0-ibm-demo-1.5.0.10-1jpp.4.el5
1.5.0-ibm-demo-1.5.0.10-1jpp.4.el5
redhat/java<1.5.0-ibm-demo-1.5.0.10-1jpp.4.el5
1.5.0-ibm-demo-1.5.0.10-1jpp.4.el5
redhat/java<1.5.0-ibm-devel-1.5.0.10-1jpp.4.el5
1.5.0-ibm-devel-1.5.0.10-1jpp.4.el5
redhat/java<1.5.0-ibm-devel-1.5.0.10-1jpp.4.el5
1.5.0-ibm-devel-1.5.0.10-1jpp.4.el5
redhat/java<1.5.0-ibm-javacomm-1.5.0.10-1jpp.4.el5
1.5.0-ibm-javacomm-1.5.0.10-1jpp.4.el5
redhat/java<1.5.0-ibm-javacomm-1.5.0.10-1jpp.4.el5
1.5.0-ibm-javacomm-1.5.0.10-1jpp.4.el5
redhat/java<1.5.0-ibm-jdbc-1.5.0.10-1jpp.4.el5
1.5.0-ibm-jdbc-1.5.0.10-1jpp.4.el5
redhat/java<1.5.0-ibm-plugin-1.5.0.10-1jpp.4.el5
1.5.0-ibm-plugin-1.5.0.10-1jpp.4.el5
redhat/java<1.5.0-ibm-src-1.5.0.10-1jpp.4.el5
1.5.0-ibm-src-1.5.0.10-1jpp.4.el5
redhat/java<1.5.0-ibm-src-1.5.0.10-1jpp.4.el5
1.5.0-ibm-src-1.5.0.10-1jpp.4.el5
redhat/java<1.5.0-ibm-accessibility-1.5.0.10-1jpp.4.el5
1.5.0-ibm-accessibility-1.5.0.10-1jpp.4.el5

Remediation

Event History

Aug 28, 2009
Advisory Published
via Red Hat·12:00 AM
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of RHSA-2009:1236?

The vulnerability fixed by RHSA-2009:1236 is considered critical, impacting the security of applications utilizing IBM Java 2 Runtime Environment.

2

How do I fix RHSA-2009:1236?

To fix RHSA-2009:1236, users should update to the latest version of IBM Java specified in the advisory, namely 1.5.0-ibm-1.5.0.10-1jpp.4.el5.

3

What are the affected packages for RHSA-2009:1236?

RHSA-2009:1236 affects various IBM Java packages, including java, java-accessibility, java-demo, java-devel, java-javacomm, java-jdbc, java-plugin, and java-src.

4

Is RHSA-2009:1236 related to any specific Java version?

Yes, RHSA-2009:1236 specifically addresses vulnerabilities in IBM Java version 1.5.0.

5

What should I do if I cannot update my system for RHSA-2009:1236?

If you cannot update your system for RHSA-2009:1236, consider implementing workarounds or additional security measures to mitigate risks associated with the vulnerabilities.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203