RHSA-2009:1582: Critical: java-1.6.0-ibm security update
The IBM 1.6.0 Java release includes the IBM Java 2 Runtime Environment andthe IBM Java 2 Software Development Kit.This update fixes several vulnerabilities in the IBM Java 2 RuntimeEnvironment and the IBM Java 2 Software Development Kit. Thesevulnerabilities are summarized on the IBM "Security alerts" page listed inthe References section. (CVE-2009-2625, CVE-2009-2670, CVE-2009-2671,CVE-2009-2672, CVE-2009-2673, CVE-2009-2674, CVE-2009-2675, CVE-2009-2676)All users of java-1.6.0-ibm are advised to upgrade to these updatedpackages, containing the IBM 1.6.0 SR6 Java release. All running instancesof IBM Java must be restarted for the update to take effect.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2009:1582?
The severity of RHSA-2009:1582 is classified as critical due to multiple vulnerabilities that could lead to arbitrary code execution.
How do I fix RHSA-2009:1582?
To fix RHSA-2009:1582, upgrade the affected IBM Java packages to version 1.6.0-ibm-1.6.0.6-1jpp.3.el5 or later.
Which packages are affected by RHSA-2009:1582?
Affected packages include various IBM Java runtime and development environments such as ibm-devel, ibm-demo, and ibm-accessibility.
Is RHSA-2009:1582 applicable to all Java users?
RHSA-2009:1582 is applicable specifically to users of the affected IBM Java 1.6.0 packages listed for Red Hat Enterprise Linux.
What are the potential impacts of not addressing RHSA-2009:1582?
Failing to address RHSA-2009:1582 may result in system compromise through code execution exploits targeting the vulnerabilities in IBM Java.