Sun Java Vuln - Updates Available

FYI…

- http://secunia.com/advisories/25069/
Release Date: 2007-05-01
Critical: Moderately critical
Impact: Security Bypass
Where: From remote
Solution Status: Vendor Patch
Software:
Sun Java Enterprise System 5.x
Sun Java JDK 1.5.x
Sun Java JRE 1.4.x
Sun Java JRE 1.5.x / 5.x
Sun Java SDK 1.4.x
…The vulnerability is reported in Java Web Start in JDK -and- JRE 5.0 Update 10 and Java Web Start in SDK and JRE 1.4.2_13 - and earlier- for Windows, Solaris and Linux…
>>> Solution: Update to Java Web Start in JDK and JRE 5.0 Update 11 or later, or Java Web Start in SDK and JRE 1.4.2_14 or later…
– J2SE 5.0 –
http://java.sun.com/j2se/1.5.0/download.jsp
— J2SE 1.4.2 –
http://java.sun.com/j2se/1.4.2/download.html
Note that vulnerable versions should be removed from the system…
Original Advisory:
http://sunsolve.sun.com/search/document.do…y=1-26-102881-1 …"

> http://forums.tomcoyote.org/Sun_Java_v1501…sed_t75583.html

.

FYI…

Sun JDK multiple vulns - updates available
- http://secunia.com/advisories/25295/
Last Update: 2007-05-17
Critical: Highly critical
Impact: DoS, System access
Where: From remote
Solution Status: Vendor Patch
Software: Sun Java JDK 1.5.x
…The vulnerabilities are reported in JDK 1.5.0_07-b03. Other versions may also be affected.
Solution: Reportedly fixed in JDK 1.5.0_11-b03 and JDK 1.6.0_01-b06.

> http://java.sun.com/javase/downloads/index_jdk5.jsp

> http://java.sun.com/javase/downloads/index.jsp

.