RHN Errata Alert: Moderate: java-1.4.2-ibm security update

[Red Hat Network Alert <dev-null@rhn.redhat.com>]

Red Hat Network has determined that the following advisory is applicable to
one or more of the systems you have registered:

Complete information about this errata can be found at the following location:
     https://rhn.redhat.com/rhn/errata/details/Details.do?eid=9254

Security Advisory - RHSA-2009:1505-1
------------------------------------------------------------------------------
Summary:
Moderate: java-1.4.2-ibm security update

Updated java-1.4.2-ibm packages that fix two security issues are now
available for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4
Extras, and Red Hat Enterprise Linux 5 Supplementary.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description:
The IBM 1.4.2 SR13-FP1 Java release includes the IBM Java 2 Runtime
Environment and the IBM Java 2 Software Development Kit.

This update fixes two vulnerabilities in the IBM Java 2 Runtime Environment
and the IBM Java 2 Software Development Kit. These vulnerabilities are
summarized on the IBM "Security alerts" page listed in the References
section. (CVE-2008-5349, CVE-2009-2625)

All users of java-1.4.2-ibm are advised to upgrade to these updated
packages, which contain the IBM 1.4.2 SR13-FP1 Java release. All running
instances of IBM Java must be restarted for this update to take effect.

References:
http://www.redhat.com/security/updates/classification/#moderate
http://www.ibm.com/developerworks/java/jdk/alerts/
------------------------------------------------------------------------------

-------------
Taking Action
-------------
You may address the issues outlined in this advisory in two ways:

     - select your server name by clicking on its name from the list
       available at the following location, and then schedule an
       errata update for it:
           https://rhn.redhat.com/rhn/systems/SystemList.do

     - run the Update Agent on each affected server.


---------------------------------
Changing Notification Preferences
---------------------------------
To enable/disable your Errata Alert preferences globally please log in to RHN
and navigate from "Your RHN" / "Your Account" to the "Preferences" tab.

        URL: https://rhn.redhat.com/rhn/account/UserPreferences.do

You can also enable/disable notification on a per system basis by selecting an
individual system from the "Systems List". From the individual system view
click the "Details" tab.


---------------------
Affected Systems List
---------------------
This Errata Advisory may apply to the systems listed below. If you know that
this errata does not apply to a system listed, it might be possible that the
package profile for that server is out of date. In that case you should refresh 
the system's package profile by running *one* of the following commands as root 
on that system:

 * 'up2date -p' (on Enterprise Linux systems prior to RHEL5)
 * 'rhn-profile-sync' (on Enterprise Linux 5 or later) 

There are 2 affected systems registered in 'Your RHN' (only systems for
which you have explicitly enabled Errata Alerts are shown).

Release   Arch       Profile Name
--------  --------   ------------


The Red Hat Network Team

This message is being sent by Red Hat Network Alert to:
    RHN user login:        ucidcs

If you lost your RHN password, you can use the information above to
retrieve it by email from the following address:
    htts://www.redhat.com/wapps/sso/rhn/lostPassword.html

To cancel these notices, go to:
    https://rhn.redhat.com/rhn/account/UserPreferences.do