Red Hat Errata System 5.3 2011-09-30T09:18:23 Supplementary for Red Hat Enterprise Linux 5 The IBM 1.4.2 SR13-FP1 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. This update fixes two vulnerabilities in the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. These vulnerabilities are summarized on the IBM "Security alerts" page listed in the References section. (CVE-2008-5349, CVE-2009-2625) All users of java-1.4.2-ibm are advised to upgrade to these updated packages, which contain the IBM 1.4.2 SR13-FP1 Java release. All running instances of IBM Java must be restarted for this update to take effect. Moderate Copyright 2009 Red Hat, Inc. CVE-2008-5349 CVE-2009-2625 CVE-2008-5349 OpenJDK RSA public key length denial-of-service (6497740) CVE-2009-2625 OpenJDK: XML parsing Denial-Of-Service (6845701) cpe:/a:redhat:rhel_extras