RHSA-2008:1025: Critical: java-1.5.0-sun security update

Published Dec 4, 2008

Updated

The Java Runtime Environment (JRE) contains the software and tools thatusers need to run applets and applications written using the Javaprogramming language. A vulnerability was found in in Java Web Start. If a user visits amalicious website, an attacker could misuse this flaw to execute arbitrarycode. (CVE-2008-2086)Additionally, these packages fix several other vulnerabilities. These aresummarized in the "Advance notification of Security Updates for Java SE"from Sun Microsystems. Users of java-1.5.0-sun should upgrade to these updated packages, whichcorrect these issues.

Affected Software

1 affected component

Sun Microsystems Java Runtime Environment

Remediation

Event History

Dec 4, 2008

Advisory Published

12:00 AM

Data Sourced

12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2008:1025?

The severity of RHSA-2008:1025 is classified as critical due to the potential for remote code execution.

How do I fix RHSA-2008:1025?

To fix RHSA-2008:1025, users should update their Java Runtime Environment to the latest version provided by Red Hat.

Which systems are affected by RHSA-2008:1025?

RHSA-2008:1025 affects systems running vulnerable versions of the Java Runtime Environment.

What is the main vulnerability in RHSA-2008:1025?

The main vulnerability in RHSA-2008:1025 is a flaw in Java Web Start that can be exploited by visiting malicious websites.

Is there a workaround for RHSA-2008:1025 before applying the fix?

There are no reliable workarounds for RHSA-2008:1025, and it is recommended to apply the fix as soon as possible.