Sun Java Runtime Environment XML Parsing Denial of Service Vulnerability

Bugtraq ID:	35958
Class:	Unknown
CVE:	CVE-2009-2625
Remote:	Yes
Local:	No
Published:	Aug 03 2009 12:00AM
Updated:	Apr 13 2015 10:16PM
Credit:	Jukka Taimisto, Tero Rontti and Rauli Kaksonen from the CROSS project at Codenomicon Ltd, and CERT-FI
Vulnerable:	VMWare vMA 4.0 VMWare VirtualCenter 2.0.2 VMWare VirtualCenter 2.5.Update 3 build 1 VMWare VirtualCenter 2.5 Update 5 VMWare VirtualCenter 2.5 Update 2 VMWare VirtualCenter 2.5 Update 1 VMWare VirtualCenter 2.5 VMWare VirtualCenter 2.0.2 Update 5 VMWare VirtualCenter 2.0.2 Update 4 VMWare VirtualCenter 2.0.2 Update 3 VMWare VirtualCenter 2.0.2 Update 2 VMWare VirtualCenter 2.0.2 Update 1 VMWare vCenter 4.0 VMWare Server 2.0 VMWare ESX Server 3.0.3 VMWare ESX Server 4.0 VMWare ESX Server 3.5 ESX350-200910401 VMWare ESX Server 3.5 ESX350-200906407 VMWare ESX Server 3.5 ESX350-200904401 VMWare ESX Server 3.5 Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise Server 11 SuSE SUSE Linux Enterprise Server 10 SP2 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 SP3 SuSE SUSE Linux Enterprise 10 SP2 SuSE Moblin 2.0 Sun OpenJDK 6 Build b12 Sun JRE (Windows Production Release) 1.5 _06 Sun JRE (Windows Production Release) 1.5 _05 Sun JRE (Windows Production Release) 1.5 _04 Sun JRE (Windows Production Release) 1.5 _03 Sun JRE (Windows Production Release) 1.5 _02 Sun JRE (Windows Production Release) 1.5 _01 Sun JRE (Windows Production Release) 1.6.0_2 Sun JRE (Windows Production Release) 1.6.0_11 Sun JRE (Windows Production Release) 1.6.0_03 Sun JRE (Windows Production Release) 1.6.0_02 Sun JRE (Windows Production Release) 1.6.0_01 Sun JRE (Windows Production Release) 1.5.0_17 Sun JRE (Windows Production Release) 1.5.0_14 Sun JRE (Windows Production Release) 1.5.0_13 Sun JRE (Windows Production Release) 1.5.0_12 Sun JRE (Windows Production Release) 1.5.0_11 Sun JRE (Windows Production Release) 1.5.0_10 Sun JRE (Windows Production Release) 1.5.0.0_09 Sun JRE (Windows Production Release) 1.5.0.0_08 Sun JRE (Windows Production Release) 1.5.0.0_07 Sun JRE (Solaris Production Release) 1.5 _15 Sun JRE (Solaris Production Release) 1.5 _06 Sun JRE (Solaris Production Release) 1.5 _05 Sun JRE (Solaris Production Release) 1.5 _04 Sun JRE (Solaris Production Release) 1.5 _03 Sun JRE (Solaris Production Release) 1.5 _02 Sun JRE (Solaris Production Release) 1.5 _01 Sun JRE (Solaris Production Release) 1.5 Sun JRE (Solaris Production Release) 1.6.0_2 Sun JRE (Solaris Production Release) 1.6.0_11 Sun JRE (Solaris Production Release) 1.6.0_03 Sun JRE (Solaris Production Release) 1.6.0_02 Sun JRE (Solaris Production Release) 1.6.0_01 Sun JRE (Solaris Production Release) 1.5.0_17 Sun JRE (Solaris Production Release) 1.5.0_14 Sun JRE (Solaris Production Release) 1.5.0_13 Sun JRE (Solaris Production Release) 1.5.0_12 Sun JRE (Solaris Production Release) 1.5.0_11 Sun JRE (Solaris Production Release) 1.5.0_10 Sun JRE (Solaris Production Release) 1.5.0.0_09 Sun JRE (Solaris Production Release) 1.5.0.0_08 Sun JRE (Solaris Production Release) 1.5.0.0_07 Sun JRE (Linux Production Release) 1.6 _13 Sun JRE (Linux Production Release) 1.6 _12 Sun JRE (Linux Production Release) 1.6 _10 Sun JRE (Linux Production Release) 1.6 _07 Sun JRE (Linux Production Release) 1.6 _06 Sun JRE (Linux Production Release) 1.6 _05 Sun JRE (Linux Production Release) 1.6 _04 Sun JRE (Linux Production Release) 1.5 _18 Sun JRE (Linux Production Release) 1.5 _16 Sun JRE (Linux Production Release) 1.5 _15 Sun JRE (Linux Production Release) 1.5 _07 Sun JRE (Linux Production Release) 1.5 _06 Sun JRE (Linux Production Release) 1.5 _05 Sun JRE (Linux Production Release) 1.5 _04 Sun JRE (Linux Production Release) 1.5 _03 Sun JRE (Linux Production Release) 1.5 _02 Sun JRE (Linux Production Release) 1.5 _01 Sun JRE (Linux Production Release) 1.5 .0 beta Sun JRE (Linux Production Release) 1.5 Sun JRE (Linux Production Release) 1.6.0_14 Sun JRE (Linux Production Release) 1.6.0_11 Sun JRE (Linux Production Release) 1.6.0_03 Sun JRE (Linux Production Release) 1.6.0_02 Sun JRE (Linux Production Release) 1.6.0_01 Sun JRE (Linux Production Release) 1.5.0_17 Sun JRE (Linux Production Release) 1.5.0_14 Sun JRE (Linux Production Release) 1.5.0_13 Sun JRE (Linux Production Release) 1.5.0_12 Sun JRE (Linux Production Release) 1.5.0_11 Sun JRE (Linux Production Release) 1.5.0_10 Sun JRE (Linux Production Release) 1.5.0_09 Sun JRE (Linux Production Release) 1.5.0_08 Sun JDK (Windows Production Release) 1.5 0_10 Sun JDK (Windows Production Release) 1.5 .0_05 Sun JDK (Windows Production Release) 1.5 .0_04 Sun JDK (Windows Production Release) 1.5 .0_03 Sun JDK (Windows Production Release) 1.6.0_03 Sun JDK (Windows Production Release) 1.6.0_02 Sun JDK (Windows Production Release) 1.6.0_01-b06 Sun JDK (Windows Production Release) 1.6.0_01 Sun JDK (Windows Production Release) 1.5.0_16 Sun JDK (Windows Production Release) 1.5.0_13 Sun JDK (Windows Production Release) 1.5.0_12 Sun JDK (Windows Production Release) 1.5.0_11-b03 Sun JDK (Windows Production Release) 1.5.0_07-b03 Sun JDK (Windows Production Release) 1.5.0.0_11 Sun JDK (Windows Production Release) 1.5.0.0_09 Sun JDK (Windows Production Release) 1.5.0.0_08 Sun JDK (Windows Production Release) 1.5.0.0_06 Sun JDK (Solaris Production Release) 1.5 0_10 Sun JDK (Solaris Production Release) 1.5 0_09 Sun JDK (Solaris Production Release) 1.5 0_03 Sun JDK (Solaris Production Release) 1.5 _15 Sun JDK (Solaris Production Release) 1.5 _06 Sun JDK (Solaris Production Release) 1.5 .0_05 Sun JDK (Solaris Production Release) 1.5 .0_04 Sun JDK (Solaris Production Release) 1.5 .0_03 Sun JDK (Solaris Production Release) 1.6.0_03 Sun JDK (Solaris Production Release) 1.6.0_02 Sun JDK (Solaris Production Release) 1.6.0_01 Sun JDK (Solaris Production Release) 1.5.0_16 Sun JDK (Solaris Production Release) 1.5.0_13 Sun JDK (Solaris Production Release) 1.5.0_12 Sun JDK (Solaris Production Release) 1.5.0_11 Sun JDK (Linux Production Release) 1.6 _14 Sun JDK (Linux Production Release) 1.6 _13 Sun JDK (Linux Production Release) 1.6 _11 Sun JDK (Linux Production Release) 1.6 _10 Sun JDK (Linux Production Release) 1.6 _07 Sun JDK (Linux Production Release) 1.6 _06 Sun JDK (Linux Production Release) 1.6 _05 Sun JDK (Linux Production Release) 1.6 _04 Sun JDK (Linux Production Release) 1.6 _01-b06 Sun JDK (Linux Production Release) 1.6 _01 Sun JDK (Linux Production Release) 1.6 Sun JDK (Linux Production Release) 1.5 0_10 Sun JDK (Linux Production Release) 1.5 _18 Sun JDK (Linux Production Release) 1.5 _17 Sun JDK (Linux Production Release) 1.5 _15 Sun JDK (Linux Production Release) 1.5 _14 Sun JDK (Linux Production Release) 1.5 _11-b03 Sun JDK (Linux Production Release) 1.5 _07-b03 Sun JDK (Linux Production Release) 1.5 _07 Sun JDK (Linux Production Release) 1.5 _06 Sun JDK (Linux Production Release) 1.5 _02 Sun JDK (Linux Production Release) 1.5 _01 Sun JDK (Linux Production Release) 1.5 Sun JDK (Linux Production Release) 1.6.0_03 Sun JDK (Linux Production Release) 1.6.0_02 Sun JDK (Linux Production Release) 1.5.0_13 Sun JDK (Linux Production Release) 1.5.0.0_09 Sun JDK (Linux Production Release) 1.5.0.0_08 Sun JDK (Linux Production Release) 1.5.0.0_04 Sun JDK (Linux Production Release) 1.5.0.0_03 Sun Java System Application Server Standard Platform 8.1 2005 Q1 Sun Java System Application Server Standard Edition 8.2 Sun Java System Application Server Platform Edition 8.1 2005 Q1 UR1 Sun Java System Application Server Platform Edition 8.1 2005 Q1 Sun Java System Application Server Platform Edition 8.2 Sun Java System Application Server Platform Edition 8.1 Sun Java System Application Server Enterprise Edition 8.1 2005Q1RHEL2.1/RHEL3 Sun Java System Application Server Enterprise Edition 8.1 2005 Q1 Sun Java System Application Server Enterprise Edition 8.2 Sun Java System Application Server Enterprise Edition 8.1 2005 Q1 Sun Java System Application Server Enterprise Edition 8.1 Sun Java System Application Server 8.0 Platform Edition Sun Java System Application Server 8.2 Sun Java System Application Server 8.1 Sun Java System Application Server 8.0 Sun Glassfish Enterprise Server 2.1 Slackware Linux x86_64 -current Slackware Linux 13.1 x86_64 Slackware Linux 13.1 Slackware Linux 13.0 x86_64 Slackware Linux 13.0 Slackware Linux 12.2 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux 11.0 Slackware Linux -current S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 Redhat Red Hat Network Satellite (for RHEL 4) 5.1 Redhat Network Satellite (for RHEL 5 Server) 5.3 Redhat Network Satellite (for RHEL 4 AS) 5.3 Redhat JBoss Web Framework Kit 2.1 Redhat JBoss Enterprise Portal Platform 5.2.1 Redhat JBoss Enterprise Application Platform 4.3 EL5 Redhat JBoss Enterprise Application Platform 4.3 EL4 Redhat JBoss Enterprise Application Platform 4.3 Redhat JBoss Enterprise Application Platform 4.2 EL5 Redhat JBoss Enterprise Application Platform 4.2 EL4 Redhat JBoss Enterprise Application Platform 4.2 Redhat Enterprise Virtualization Manager 3.0 Redhat Enterprise Linux WS Extras 4 Redhat Enterprise Linux WS Extras 3 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Supplementary EUS 5.3.z Redhat Enterprise Linux Supplementary 5 server Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux for SAP 0 Redhat Enterprise Linux Extras 4.8.z Redhat Enterprise Linux Extras 4 Redhat Enterprise Linux Extras 3 Redhat Enterprise Linux EUS 5.3.z server Redhat Enterprise Linux ES Extras 4 Redhat Enterprise Linux ES Extras 3 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop Supplementary 5 client Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS Extras 4 Redhat Enterprise Linux AS Extras 3 Redhat Enterprise Linux 5 Server Redhat Desktop Extras 4 Redhat Desktop Extras 3 Pardus Linux 2009 0 Oracle Primavera P6 Web Services 6.2.1 Oracle Primavera P6 Web Services 7.0 SP Oracle Primavera P6 Web Services 7.0 Oracle Primavera P6 Enterprise Project Portfolio Management 6.2.1 Oracle Primavera P6 Enterprise Project Portfolio Management 7.0 Oracle Primavera P6 Enterprise Project Portfolio Management 6.1 Oracle JRockit R27.6.4 Oracle JRockit R27.6.3 Oracle JRockit R27.6.2 Oracle JRockit R27.6.0 Oracle JRockit R27.1.0 Nortel Networks Self-Service WVADS 0 Nortel Networks Self-Service Speech Server 0 Nortel Networks Self-Service Peri Application 0 Nortel Networks Self-Service MPS 500 0 Nortel Networks Self-Service MPS 1000 0 Nortel Networks Self-Service CCXML 0 Nortel Networks Self Service VoiceXML 0 Nortel Networks Contact Center - CCT 0 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 IBM Java SE 6.0 SR5 IBM J2SE 5.0 SR9 HP HP-UX 11.23 HP HP-UX 11.11 HP HP-UX 11.31 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Avaya Voice Portal 5.0 Apple Mac OS X Server 10.5.8 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.8 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.5 Apache Xerces2 Java Parser 2.9 Apache Xerces2 Java Parser 2.7.1 Apache Xerces2 Java Parser 2.2.1
Not Vulnerable:	VMWare vMA 4.0 Patch 2 VMWare VirtualCenter 2.5 Update 6 VMWare vCenter 4.0 Update 1 VMWare ESX Server 3.5 ESX350-201003403 Sun JRE (Windows Production Release) 1.6.0_15 Sun JRE (Windows Production Release) 1.5.0_20 Sun JRE (Solaris Production Release) 1.6.0_15 Sun JRE (Solaris Production Release) 1.5.0_20 Sun JRE (Linux Production Release) 1.6.0_15 Sun JRE (Linux Production Release) 1.5.0_20 Sun JDK (Windows Production Release) 1.6.0_15 Sun JDK (Windows Production Release) 1.5.0_20 Sun JDK (Solaris Production Release) 1.6.0_15 Sun JDK (Solaris Production Release) 1.5.0_20 Sun JDK (Linux Production Release) 1.6.0_15 Sun JDK (Linux Production Release) 1.5.0_20 Redhat JBoss Web Framework Kit 2.2 Redhat JBoss Enterprise Portal Platform 5.2.2 IBM J2SE 5.0 SR10

Sun Java Runtime Environment XML Parsing Denial of Service Vulnerability

Sun Java Runtime Environment (JRE) is prone to a denial-of-service vulnerability.

Attackers may exploit this issue to cause denial-of-service conditions in applications that use the vulnerable environment.

This issue affects the following:

JDK and JRE 6 Update 14 and prior
JDK and JRE 5.0 Update 19 and prior

NOTE: This issue was previously covered in BID 35922 (Sun Java SE Multiple Security Vulnerabilities), but has been assigned its own record to better document it.

Sun Java Runtime Environment XML Parsing Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Java Runtime Environment XML Parsing Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.


Sun JRE (Windows Production Release) 1.5.0_10

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

VMWare ESX Server 3.5 ESX350-200906407

• VMWare ESX350-201003403-SG
  http://download3.vmware.com/software/vi/ESX350-201003403-SG.zip

Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu expat_2.0.1-4ubuntu0.8.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/e/expat/expat_2.0.1-4ubuntu0.8.1 0.1_powerpc.deb


• Ubuntu icedtea6-plugin_6b12-0ubuntu6.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openjdk-6/icedtea6-plugin_6b12-0ub untu6.5_powerpc.deb


• Ubuntu lib64expat1-dev_2.0.1-4ubuntu0.8.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/e/expat/lib64expat1-dev_2.0.1-4ubunt u0.8.10.1_powerpc.deb


• Ubuntu lib64expat1_2.0.1-4ubuntu0.8.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/e/expat/lib64expat1_2.0.1-4ubuntu0.8 .10.1_powerpc.deb


• Ubuntu libexpat1-dev_2.0.1-4ubuntu0.8.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/e/expat/libexpat1-dev_2.0.1-4ubuntu0 .8.10.1_powerpc.deb


• Ubuntu libexpat1-udeb_2.0.1-4ubuntu0.8.10.1_powerpc.udeb
  http://ports.ubuntu.com/pool/universe/e/expat/libexpat1-udeb_2.0.1-4ub untu0.8.10.1_powerpc.udeb


• Ubuntu libexpat1_2.0.1-4ubuntu0.8.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/e/expat/libexpat1_2.0.1-4ubuntu0.8.1 0.1_powerpc.deb


• Ubuntu openjdk-6-dbg_6b12-0ubuntu6.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-dbg_6b12-0ubun tu6.5_powerpc.deb


• Ubuntu openjdk-6-demo_6b12-0ubuntu6.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-demo_6b12-0ubu ntu6.5_powerpc.deb


• Ubuntu openjdk-6-doc_6b12-0ubuntu6.5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-doc_ 6b12-0ubuntu6.5_all.deb


• Ubuntu openjdk-6-jdk_6b12-0ubuntu6.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jdk_6b12-0ubun tu6.5_powerpc.deb


• Ubuntu openjdk-6-jre-headless_6b12-0ubuntu6.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jre-headless_6 b12-0ubuntu6.5_powerpc.deb


• Ubuntu openjdk-6-jre-lib_6b12-0ubuntu6.5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jre- lib_6b12-0ubuntu6.5_all.deb


• Ubuntu openjdk-6-jre_6b12-0ubuntu6.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jre_6b12-0ubun tu6.5_powerpc.deb


• Ubuntu openjdk-6-source-files_6b12-0ubuntu6.5_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6- source-files_6b12-0ubuntu6.5_all.deb


• Ubuntu openjdk-6-source_6b12-0ubuntu6.5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-sour ce_6b12-0ubuntu6.5_all.deb

Slackware Linux 12.2

• Slackware expat-2.0.1-i486-2_slack12.2.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ expat-2.0.1-i486-2_slack12.2.tgz

Debian Linux 5.0 alpha

• Debian expat_2.0.1-4+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/e/expat/expat_2.0.1-4+len ny1_alpha.deb


• Debian libexpat1-dev_2.0.1-4+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/e/expat/libexpat1-dev_2.0 .1-4+lenny1_alpha.deb


• Debian libexpat1-udeb_2.0.1-4+lenny1_alpha.udeb
  http://security.debian.org/pool/updates/main/e/expat/libexpat1-udeb_2. 0.1-4+lenny1_alpha.udeb


• Debian libexpat1_2.0.1-4+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/e/expat/libexpat1_2.0.1-4 +lenny1_alpha.deb


• Debian libxerces2-java-doc_2.9.1-2+lenny1_all.deb
  http://security.debian.org/pool/updates/main/libx/libxerces2-java/libx erces2-java-doc_2.9.1-2+lenny1_all.deb


• Debian libxerces2-java_2.9.1-2+lenny1_all.deb
  http://security.debian.org/pool/updates/main/libx/libxerces2-java/libx erces2-java_2.9.1-2+lenny1_all.deb

Sun JRE (Windows Production Release) 1.5.0_14

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Sun JDK (Solaris Production Release) 1.5.0_12

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Ubuntu Ubuntu Linux 9.04 sparc

• Ubuntu expat_2.0.1-4ubuntu0.9.04.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/e/expat/expat_2.0.1-4ubuntu0.9.0 4.1_sparc.deb


• Ubuntu lib64expat1-dev_2.0.1-4ubuntu0.9.04.1_sparc.deb
  http://ports.ubuntu.com/pool/main/e/expat/lib64expat1-dev_2.0.1-4ubunt u0.9.04.1_sparc.deb


• Ubuntu lib64expat1_2.0.1-4ubuntu0.9.04.1_sparc.deb
  http://ports.ubuntu.com/pool/main/e/expat/lib64expat1_2.0.1-4ubuntu0.9 .04.1_sparc.deb


• Ubuntu libexpat1-dev_2.0.1-4ubuntu0.9.04.1_sparc.deb
  http://ports.ubuntu.com/pool/main/e/expat/libexpat1-dev_2.0.1-4ubuntu0 .9.04.1_sparc.deb


• Ubuntu libexpat1-udeb_2.0.1-4ubuntu0.9.04.1_sparc.udeb
  http://ports.ubuntu.com/pool/main/e/expat/libexpat1-udeb_2.0.1-4ubuntu 0.9.04.1_sparc.udeb


• Ubuntu libexpat1_2.0.1-4ubuntu0.9.04.1_sparc.deb
  http://ports.ubuntu.com/pool/main/e/expat/libexpat1_2.0.1-4ubuntu0.9.0 4.1_sparc.deb

Sun Java System Application Server Enterprise Edition 8.1

• Sun 119166-39
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119166-39-1


• Sun 119167-39
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119167-39-1


• Sun 119168-39
  linux
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119168-39-1


• Sun 119169-32
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119169-32-1


• Sun 119170-32
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119170-32-1


• Sun 119171-32
  linux
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119171-32-1


• Sun 119172-32
  windows
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119172-32-1


• Sun 122848-24
  windows
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -122848-24-1

Sun JDK (Windows Production Release) 1.6.0_01

• Sun JDK and JRE 6 Update 15
  http://java.sun.com/javase/downloads/index.jsp

Sun JRE (Linux Production Release) 1.5.0_10

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Sun JRE (Solaris Production Release) 1.5.0_13

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Ubuntu Ubuntu Linux 9.04 lpia

• Ubuntu expat_2.0.1-4ubuntu0.9.04.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/e/expat/expat_2.0.1-4ubuntu0.9.0 4.1_lpia.deb


• Ubuntu libexpat1-dev_2.0.1-4ubuntu0.9.04.1_lpia.deb
  http://ports.ubuntu.com/pool/main/e/expat/libexpat1-dev_2.0.1-4ubuntu0 .9.04.1_lpia.deb


• Ubuntu libexpat1-udeb_2.0.1-4ubuntu0.9.04.1_lpia.udeb
  http://ports.ubuntu.com/pool/main/e/expat/libexpat1-udeb_2.0.1-4ubuntu 0.9.04.1_lpia.udeb


• Ubuntu libexpat1_2.0.1-4ubuntu0.9.04.1_lpia.deb
  http://ports.ubuntu.com/pool/main/e/expat/libexpat1_2.0.1-4ubuntu0.9.0 4.1_lpia.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu expat_2.0.1-4ubuntu0.8.10.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/e/expat/expat_2.0.1-4ubuntu0.8.1 0.1_sparc.deb


• Ubuntu icedtea6-plugin_6b12-0ubuntu6.5_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openjdk-6/icedtea6-plugin_6b12-0ub untu6.5_sparc.deb


• Ubuntu lib64expat1-dev_2.0.1-4ubuntu0.8.10.1_sparc.deb
  http://ports.ubuntu.com/pool/main/e/expat/lib64expat1-dev_2.0.1-4ubunt u0.8.10.1_sparc.deb


• Ubuntu lib64expat1_2.0.1-4ubuntu0.8.10.1_sparc.deb
  http://ports.ubuntu.com/pool/main/e/expat/lib64expat1_2.0.1-4ubuntu0.8 .10.1_sparc.deb


• Ubuntu libexpat1-dev_2.0.1-4ubuntu0.8.10.1_sparc.deb
  http://ports.ubuntu.com/pool/main/e/expat/libexpat1-dev_2.0.1-4ubuntu0 .8.10.1_sparc.deb


• Ubuntu libexpat1-udeb_2.0.1-4ubuntu0.8.10.1_sparc.udeb
  http://ports.ubuntu.com/pool/universe/e/expat/libexpat1-udeb_2.0.1-4ub untu0.8.10.1_sparc.udeb


• Ubuntu libexpat1_2.0.1-4ubuntu0.8.10.1_sparc.deb
  http://ports.ubuntu.com/pool/main/e/expat/libexpat1_2.0.1-4ubuntu0.8.1 0.1_sparc.deb


• Ubuntu openjdk-6-dbg_6b12-0ubuntu6.5_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-dbg_6b12-0ubun tu6.5_sparc.deb


• Ubuntu openjdk-6-demo_6b12-0ubuntu6.5_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-demo_6b12-0ubu ntu6.5_sparc.deb


• Ubuntu openjdk-6-doc_6b12-0ubuntu6.5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-doc_ 6b12-0ubuntu6.5_all.deb


• Ubuntu openjdk-6-jdk_6b12-0ubuntu6.5_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jdk_6b12-0ubun tu6.5_sparc.deb


• Ubuntu openjdk-6-jre-headless_6b12-0ubuntu6.5_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jre-headless_6 b12-0ubuntu6.5_sparc.deb


• Ubuntu openjdk-6-jre-lib_6b12-0ubuntu6.5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jre- lib_6b12-0ubuntu6.5_all.deb


• Ubuntu openjdk-6-jre_6b12-0ubuntu6.5_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openjdk-6/openjdk-6-jre_6b12-0ubun tu6.5_sparc.deb


• Ubuntu openjdk-6-source-files_6b12-0ubuntu6.5_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/o/openjdk-6/openjdk-6- source-files_6b12-0ubuntu6.5_all.deb


• Ubuntu openjdk-6-source_6b12-0ubuntu6.5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-sour ce_6b12-0ubuntu6.5_all.deb

Debian Linux 5.0 armel

• Debian expat_2.0.1-4+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/e/expat/expat_2.0.1-4+len ny1_armel.deb


• Debian libexpat1-dev_2.0.1-4+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/e/expat/libexpat1-dev_2.0 .1-4+lenny1_armel.deb


• Debian libexpat1-udeb_2.0.1-4+lenny1_armel.udeb
  http://security.debian.org/pool/updates/main/e/expat/libexpat1-udeb_2. 0.1-4+lenny1_armel.udeb


• Debian libexpat1_2.0.1-4+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/e/expat/libexpat1_2.0.1-4 +lenny1_armel.deb


• Debian libxerces2-java-doc_2.9.1-2+lenny1_all.deb
  http://security.debian.org/pool/updates/main/libx/libxerces2-java/libx erces2-java-doc_2.9.1-2+lenny1_all.deb


• Debian libxerces2-java-gcj_2.9.1-2+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/libx/libxerces2-java/libx erces2-java-gcj_2.9.1-2+lenny1_armel.deb


• Debian libxerces2-java_2.9.1-2+lenny1_all.deb
  http://security.debian.org/pool/updates/main/libx/libxerces2-java/libx erces2-java_2.9.1-2+lenny1_all.deb

Sun JDK (Linux Production Release) 1.5.0.0_03

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu expat_2.0.1-4ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/e/expat/expat_2.0.1-4u buntu1.1_amd64.deb


• Ubuntu libexpat1-dev_2.0.1-4ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/e/expat/libexpat1-dev_2.0. 1-4ubuntu1.1_amd64.deb


• Ubuntu libexpat1-udeb_2.0.1-4ubuntu1.1_amd64.udeb
  http://security.ubuntu.com/ubuntu/pool/main/e/expat/libexpat1-udeb_2.0 .1-4ubuntu1.1_amd64.udeb


• Ubuntu libexpat1_2.0.1-4ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/e/expat/libexpat1_2.0.1-4u buntu1.1_amd64.deb

Sun Java System Application Server Standard Platform 8.1 2005 Q1

• Sun 119166-39
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119166-39-1


• Sun 119167-39
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119167-39-1


• Sun 119168-39
  linux
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119168-39-1


• Sun 119169-32
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119169-32-1


• Sun 119170-32
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119170-32-1


• Sun 119171-32
  linux
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119171-32-1


• Sun 119172-32
  windows
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119172-32-1


• Sun 122848-24
  windows
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -122848-24-1

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva java-1.6.0-openjdk-1.6.0.0-0.20.b16.0.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva java-1.6.0-openjdk-demo-1.6.0.0-0.20.b16.0.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva java-1.6.0-openjdk-devel-1.6.0.0-0.20.b16.0.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva java-1.6.0-openjdk-javadoc-1.6.0.0-0.20.b16.0.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva java-1.6.0-openjdk-plugin-1.6.0.0-0.20.b16.0.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva java-1.6.0-openjdk-src-1.6.0.0-0.20.b16.0.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Sun JDK (Windows Production Release) 1.5.0.0_08

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Debian Linux 4.0 mips

• Debian expat_1.95.8-3.4+etch1_mips.deb
  http://security.debian.org/pool/updates/main/e/expat/expat_1.95.8-3.4+ etch1_mips.deb


• Debian libexpat1-dev_1.95.8-3.4+etch1_mips.deb
  http://security.debian.org/pool/updates/main/e/expat/libexpat1-dev_1.9 5.8-3.4+etch1_mips.deb


• Debian libexpat1-udeb_1.95.8-3.4+etch1_mips.udeb
  http://security.debian.org/pool/updates/main/e/expat/libexpat1-udeb_1. 95.8-3.4+etch1_mips.udeb


• Debian libexpat1_1.95.8-3.4+etch1_mips.deb
  http://security.debian.org/pool/updates/main/e/expat/libexpat1_1.95.8- 3.4+etch1_mips.deb


• Debian libxerces2-java_2.8.1-1+etch1_all.deb
  http://security.debian.org/pool/updates/main/libx/libxerces2-java/libx erces2-java_2.8.1-1+etch1_all.deb

Sun JDK (Solaris Production Release) 1.5.0_16

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Debian Linux 4.0 arm

• Debian expat_1.95.8-3.4+etch1_arm.deb
  http://security.debian.org/pool/updates/main/e/expat/expat_1.95.8-3.4+ etch1_arm.deb


• Debian libexpat1-dev_1.95.8-3.4+etch1_arm.deb
  http://security.debian.org/pool/updates/main/e/expat/libexpat1-dev_1.9 5.8-3.4+etch1_arm.deb


• Debian libexpat1-udeb_1.95.8-3.4+etch1_arm.udeb
  http://security.debian.org/pool/updates/main/e/expat/libexpat1-udeb_1. 95.8-3.4+etch1_arm.udeb


• Debian libexpat1_1.95.8-3.4+etch1_arm.deb
  http://security.debian.org/pool/updates/main/e/expat/libexpat1_1.95.8- 3.4+etch1_arm.deb


• Debian libxerces2-java_2.8.1-1+etch1_all.deb
  http://security.debian.org/pool/updates/main/libx/libxerces2-java/libx erces2-java_2.8.1-1+etch1_all.deb

Debian Linux 4.0 m68k

• Debian libxerces2-java_2.8.1-1+etch1_all.deb
  http://security.debian.org/pool/updates/main/libx/libxerces2-java/libx erces2-java_2.8.1-1+etch1_all.deb

Sun JDK (Windows Production Release) 1.5.0.0_09

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

MandrakeSoft Enterprise Server 5

• Mandriva java-1.6.0-openjdk-1.6.0.0-0.20.b16.0.4mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva java-1.6.0-openjdk-demo-1.6.0.0-0.20.b16.0.4mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva java-1.6.0-openjdk-devel-1.6.0.0-0.20.b16.0.4mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva java-1.6.0-openjdk-javadoc-1.6.0.0-0.20.b16.0.4mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva java-1.6.0-openjdk-plugin-1.6.0.0-0.20.b16.0.4mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva java-1.6.0-openjdk-src-1.6.0.0-0.20.b16.0.4mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/

Sun Glassfish Enterprise Server 2.1

• Sun 119166-39
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119166-39-1


• Sun 119169-32
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119169-32-1


• Sun 128640-13
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -128640-13-1


• Sun 128641-13
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -128641-13-1


• Sun 128642-13
  linux
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -128642-13-1


• Sun 128643-13
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -128643-13-1


• Sun 128644-13
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -128644-13-1


• Sun 128645-13
  linux
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -128645-13-1


• Sun 141700-02
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -141700-02-1


• Sun 141701-02
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -141701-02-1


• Sun 141702-02
  linux
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -141702-02-1


• Sun 141709-02
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -141709-02-1


• Sun 141710-02
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -141710-02-1


• Sun 141711-02
  linux
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -141711-02-1

Sun JDK (Solaris Production Release) 1.5.0_11

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Debian Linux 5.0 hppa

• Debian expat_2.0.1-4+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/e/expat/expat_2.0.1-4+len ny1_hppa.deb


• Debian libexpat1-dev_2.0.1-4+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/e/expat/libexpat1-dev_2.0 .1-4+lenny1_hppa.deb


• Debian libexpat1-udeb_2.0.1-4+lenny1_hppa.udeb
  http://security.debian.org/pool/updates/main/e/expat/libexpat1-udeb_2. 0.1-4+lenny1_hppa.udeb


• Debian libexpat1_2.0.1-4+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/e/expat/libexpat1_2.0.1-4 +lenny1_hppa.deb


• Debian libxerces2-java-doc_2.9.1-2+lenny1_all.deb
  http://security.debian.org/pool/updates/main/libx/libxerces2-java/libx erces2-java-doc_2.9.1-2+lenny1_all.deb


• Debian libxerces2-java_2.9.1-2+lenny1_all.deb
  http://security.debian.org/pool/updates/main/libx/libxerces2-java/libx erces2-java_2.9.1-2+lenny1_all.deb

Sun JDK (Solaris Production Release) 1.6.0_02

• Sun JDK and JRE 6 Update 15
  http://java.sun.com/javase/downloads/index.jsp

Debian Linux 5.0 m68k

• Debian libxerces2-java-doc_2.9.1-2+lenny1_all.deb
  http://security.debian.org/pool/updates/main/libx/libxerces2-java/libx erces2-java-doc_2.9.1-2+lenny1_all.deb


• Debian libxerces2-java_2.9.1-2+lenny1_all.deb
  http://security.debian.org/pool/updates/main/libx/libxerces2-java/libx erces2-java_2.9.1-2+lenny1_all.deb

Sun JDK (Linux Production Release) 1.5

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Sun JRE (Windows Production Release) 1.5 _01

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Sun JDK (Linux Production Release) 1.5 _02

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Sun JRE (Windows Production Release) 1.5 _02

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Sun JDK (Solaris Production Release) 1.5 .0_03

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Sun JRE (Linux Production Release) 1.5 _03

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Sun JDK (Solaris Production Release) 1.5 .0_04

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Sun JDK (Solaris Production Release) 1.5 _06

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Sun JDK (Solaris Production Release) 1.5 0_09

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Sun JRE (Linux Production Release) 1.5 _15

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Sun JRE (Windows Production Release) 1.5 _06

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Sun JRE (Solaris Production Release) 1.5

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Sun JRE (Linux Production Release) 1.5 .0 beta

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Sun JDK (Solaris Production Release) 1.5 0_03

• Sun JDK and JRE 5.0 Update 20
  http://java.sun.com/javase/downloads/index_jdk5.jsp

Sun JRE (Linux Production Release) 1.6 _07

• Sun JDK and JRE 6 Update 15
  http://java.sun.com/javase/downloads/index.jsp

Sun JDK (Linux Production Release) 1.6 _04

• Sun JDK and JRE 6 Update 15
  http://java.sun.com/javase/downloads/index.jsp

Sun JDK (Linux Production Release) 1.6 _07

• Sun JDK and JRE 6 Update 15
  http://java.sun.com/javase/downloads/index.jsp

VMWare ESX Server 3.0.3

• VMWare ESX350-201003403-SG
  http://download3.vmware.com/software/vi/ESX350-201003403-SG.zip

Sun Java System Application Server Platform Edition 8.1 2005 Q1

• Sun 119166-39
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119166-39-1


• Sun 119167-39
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119167-39-1


• Sun 119168-39
  linux
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119168-39-1


• Sun 119169-32
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119169-32-1


• Sun 119170-32
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119170-32-1


• Sun 119171-32
  linux
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119171-32-1


• Sun 119172-32
  windows
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119172-32-1


• Sun 122848-24
  windows
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -122848-24-1

Sun Java System Application Server Platform Edition 8.1 2005 Q1 UR1

• Sun 119166-39
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119166-39-1


• Sun 119167-39
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119167-39-1


• Sun 119168-39
  linux
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119168-39-1


• Sun 119169-32
  sparc
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119169-32-1


• Sun 119170-32
  x86
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119170-32-1


• Sun 119171-32
  linux
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119171-32-1


• Sun 119172-32
  windows
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119172-32-1


• Sun 122848-24
  windows
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -122848-24-1

Sun Java Runtime Environment XML Parsing Denial of Service Vulnerability

References:

• Advance notification of Security Updates for Java SE (Sun)
  
• Java SE 6 Update Release Notes (Sun)
  
• Java�?� 2 Platform Standard Edition Development Kit 5.0 Update 20 (JDK 5.0 Update (Sun)
  
• Moderate: JBoss Web Framework Kit 2.2.0 update (Red Hat)
  
• Sun's latest Java security alerts (IBM)
  
• VMSA-2009-0016 VMware vCenter and ESX update release and VMA patch release addre (VMware Security Team )
  
• A Security Vulnerability in the Java Runtime Environment (JRE) Bundled With Sun (Sun)
  
• ASA-2009-568 xerces-j2 security update (RHSA-2009-1615) (Avaya)
  
• JBoss Enterprise Portal Platform 5.2.2 Update (Red Hat)
  
• Nortel Enterprise Response to Sun Java JDK / JRE Multiple Vulnerabilities (Aug 0 (Nortel Networks)
  
• Oracle Critical Patch Update Advisory - January 2010 (Oracle)
  
• Oracle Critical Patch Update Advisory - October 2009 (Oracle)
  
• RHSA-2009:1199 java-1.5.0-sun security update (Red Hat)
  
• RHSA-2009:1200 java-1.6.0-sun security update (Red Hat)
  
• RHSA-2009:1201 java-1.6.0-openjdk security and bug fix update (Red Hat)
  
• RHSA-2009:1551-1 java-1.4.2-ibm security update (Red Hat)
  
• RHSA-2012:1537-1: jasperreports-server-pro security and bug fix update (Red Hat)
  
• Solution 263489: A Security Vulnerability in the Java Runtime Environment (JRE) (Sun)