RHSA-2015:1091: Low: Red Hat Satellite IBM Java Runtime security update

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBMJava Software Development Kit.This update corrects several security vulnerabilities in the IBM JavaRuntime Environment shipped as part of Red Hat Satellite 5. In a typicaloperating environment, these are of low security risk as the runtime is notused on untrusted applets. Further information about these flaws can befound on the IBM Java Security alerts page, listed in the Referencessection. (CVE-2005-1080, CVE-2015-0138, CVE-2015-0192, CVE-2015-0458,CVE-2015-0459, CVE-2015-0469, CVE-2015-0477, CVE-2015-0478, CVE-2015-0480,CVE-2015-0488, CVE-2015-0491, CVE-2015-1914, CVE-2015-2808)The CVE-2015-0478 issue was discovered by Florian Weimer of Red HatProduct Security.Note: With this update, the IBM JDK now disables RC4 SSL/TLS cipher suitesby default to address the CVE-2015-2808 issue. Refer to Red Hat Bugzillabug 1207101, linked to from the References section, for additional detailsabout this change.Users of Red Hat Satellite 5.6 and 5.7 are advised to upgrade to theseupdated packages, which contain the IBM Java SE 6 SR16-FP4 release. Forthis update to take effect, Red Hat Satellite must be restarted("/usr/sbin/rhn-satellite restart"), as well as all running instances ofIBM Java.