<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="82cdeeaf145bab6cfd200feb8ad71d89"!-->
<patch
    xmlns="http://novell.com/package/metadata/suse/patch"
    xmlns:yum="http://linux.duke.edu/metadata/common"
    xmlns:rpm="http://linux.duke.edu/metadata/rpm"
    xmlns:suse="http://novell.com/package/metadata/suse/common"
    patchid="slesp3-java-1_4_2-ibm-6523"
    timestamp="1255531835"
    engine="1.0">
  <yum:name>slesp3-java-1_4_2-ibm</yum:name>
  <summary lang="en">Security update for IBM Java 1.4.2</summary>
  <summary lang="de">Security update for IBM Java 1.4.2</summary>
  <description lang="en">IBM Java 1.4.2 was updated to SR13 FP1.

It fixes following two security issues: CVE-2009-2625: A
vulnerability in the Java Runtime Environment (JRE) with
parsing XML data might allow a remote client to create a
denial-of-service condition on the system that the JRE runs
on.

CVE-2008-5349: A vulnerability in how the Java Runtime
Environment (JRE) handles certain RSA public keys might
cause the JRE to consume an excessive amount of CPU
resources. This might lead to a Denial of Service (DoS)
condition on affected systems. Such keys could be provided
by a remote client of an application.

This issue affects the following security providers:
IBMJCE, IBMPKCS11Impl and IBMJCEFIPS.
</description>
  <description lang="de">IBM Java 1.4.2 was updated to SR13 FP1.

It fixes following two security issues: CVE-2009-2625: A
vulnerability in the Java Runtime Environment (JRE) with
parsing XML data might allow a remote client to create a
denial-of-service condition on the system that the JRE runs
on.

CVE-2008-5349: A vulnerability in how the Java Runtime
Environment (JRE) handles certain RSA public keys might
cause the JRE to consume an excessive amount of CPU
resources. This might lead to a Denial of Service (DoS)
condition on affected systems. Such keys could be provided
by a remote client of an application.

This issue affects the following security providers:
IBMJCE, IBMPKCS11Impl and IBMJCEFIPS.
</description>
  <yum:version ver="6523" rel="0"/>
  <rpm:requires>
    <rpm:entry kind="atom" name="java-1_4_2-ibm" epoch="0" ver="1.4.2_sr13.1" rel="0.5.1" flags="EQ"/>
    <rpm:entry kind="atom" name="java-1_4_2-ibm-devel" epoch="0" ver="1.4.2_sr13.1" rel="0.5.1" flags="EQ"/>
    <rpm:entry kind="atom" name="java-1_4_2-ibm-jdbc" epoch="0" ver="1.4.2_sr13.1" rel="0.5.1" flags="EQ"/>
  </rpm:requires>
  <category>security</category>
  <atoms>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>java-1_4_2-ibm</name>
      <arch>i586</arch>
      <version epoch="0" ver="1.4.2_sr13.1" rel="0.5.1"/>
      <checksum type="sha" pkgid="YES">5677ef6186c3adda522b3a57c41a109c4a18fc39</checksum>
      <time file="1255531884" build="1255531835"/>
      <size package="38615269" installed="62746962" archive="61178988"/>
      <location xml:base="media://#1" href="suse/i586/java-1_4_2-ibm-1.4.2_sr13.1-0.5.1.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="java-1_4_2-ibm" epoch="0" ver="1.4.2_sr13.1" rel="0.5.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="java-1_4_2-ibm"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>java-1_4_2-ibm-devel</name>
      <arch>i586</arch>
      <version epoch="0" ver="1.4.2_sr13.1" rel="0.5.1"/>
      <checksum type="sha" pkgid="YES">2d4c9a0c80875e59b25c7705a76b3c43ad1e752d</checksum>
      <time file="1255531884" build="1255531835"/>
      <size package="2961720" installed="4210299" archive="4220432"/>
      <location xml:base="media://#1" href="suse/i586/java-1_4_2-ibm-devel-1.4.2_sr13.1-0.5.1.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="java-1_4_2-ibm-devel" epoch="0" ver="1.4.2_sr13.1" rel="0.5.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="java-1_4_2-ibm-devel"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
    <package xmlns="http://linux.duke.edu/metadata/common" type="rpm">
      <name>java-1_4_2-ibm-jdbc</name>
      <arch>i586</arch>
      <version epoch="0" ver="1.4.2_sr13.1" rel="0.5.1"/>
      <checksum type="sha" pkgid="YES">4db28c66233e7083d33b93599f340cb19a2a1acc</checksum>
      <time file="1255531884" build="1255531835"/>
      <size package="30618" installed="60410" archive="60704"/>
      <location xml:base="media://#1" href="suse/i586/java-1_4_2-ibm-jdbc-1.4.2_sr13.1-0.5.1.i586.rpm"/>
      <format>
        <rpm:requires>
          <rpm:entry kind="package" name="java-1_4_2-ibm-jdbc" epoch="0" ver="1.4.2_sr13.1" rel="0.5.1" flags="GE"/>
        </rpm:requires>
        <suse:freshens>
          <suse:entry kind="package" name="java-1_4_2-ibm-jdbc"/>
        </suse:freshens>
      </format>
      <pkgfiles xmlns="http://novell.com/package/metadata/suse/patch">
      </pkgfiles>
    </package>
  </atoms>
</patch>
