Red Hat

hello,
I'm a Solaris admin and I was asked to patch some RHEL servers. I'm having trouble trying to figure out the RHEL java version. Can someone help me?

This what I do in Solaris

Code:

java -version
java version "1.5.0_34"
java(TM) 2 Runtime Envirement, Standard Edition (build 1.5.0_34-b03)
Java HotSpot(TM) Server VM (build 1.5.0_34-b03, mixed mode)

This what I see on RHEL

Code:

java -version
java version "1.4.2"
gij (GNU libgcj) version 4.1.2 20080704 (Red Hat 4.1.2-52)

or

Code:

java -version
java version "1.6.0_22"
OpenJDK Runtime Envirement (IcedTea6 1.10.6) (rhel-1.25.1.10.6.e15_8-x86_64)
OpenJDK 64-Bit Server VM (build 20.0-b11 mixed mode)

I went to the RHEL site and looked at this page.
https://access.redhat.com/security/cve/CVE-2010-4454
The issue is the version numbers don't match the layout I get from the command line. I can't figure out if my version has been patched to cover the vulnerability. In Solaris The latest update is 1.5.0_34 & 1.6.0_31 (put out in Feb), I would like to have the RHEL servers patched to the same level.

OS
RHEL 5.x, (5)
RHEL 4.x (1)

Can someone help me understand the versioning RHEL is using.

The reason is you are querying the object instead of the package. Don't query Java to find out what package it came from. It doesn't know.

You must do this:

Code:

rpm -qf `which java`

then you should see the package name coincide with the CVE alert. You can then download the new version and update it by running YUM or RPM.

There's more than one kind of Java. Sun servers use Sun's own java implementation, Linux servers use the open-source GNU java implementation. I'm not convinced their implementations version numbers' have anything to do with each other.

I know the Java on Solaris is different from RHEL but as you can see from the link provided to the RHEL site even there version layout is different from what I'm getting.

---------- Post updated at 04:11 PM ---------- Previous update was at 03:47 PM ----------

mark54g
Thanks for the info. The problem is I don't know from the page what the patch number is.

I tried RHSA-2011:0490-1 put I guesses this is not right. I'm getting error like rpmq: no arguments given for quary and No such file or directory.

Sorry I new to RHEL and I don't know much about RHEL

"Patch number" is a Solaris thing.

Corona is correct. Red Hat Linux does not put out "Patches" but rather updates to RPMs. In order to "Patch" you should apply the new RPM to the system.

You must either have a repository set up and properly configured to contain all your RPMs or you must have them accessible to the local system via HTTP or local/network mount.