Description
Unspecified vulnerability in deserialization in the Provider class in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, aka BugId 6444262.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | java-1.5.0-sun +5 | 1.5.0.20-1jpp.1.el5 | RHSA-2009:1199 |
| RHEL 4 | java-1.5.0-sun +5 | 1.5.0.20-1jpp.1.el4 | RHSA-2009:1199 |
Advisories 1
- RHSA-2009:1199 Red Hat Security Advisory: java-1.5.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- ADV-2009-2543 vdb-entry
- 37460 third-party-advisory
- GLSA-200911-02 vendor-advisory
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html
- 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components mailing-list
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-118667-22-1
- http://java.sun.com/j2se/1.5.0/ReleaseNotes.html
- APPLE-SA-2009-09-03-1 vendor-advisory
- 37386 third-party-advisory
- ADV-2009-3316 vdb-entry