Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 6.0 | openjdk-6 | 6b18-1.8.9-0.1~squeeze1 | DSA-2311-1 |
| Debian 5.0 | openjdk-6 | 6b18-1.8.10-0~lenny2 | DSA-2358-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | java-1.6.0-openjdk +4 | 1:1.6.0.0-1.39.1.9.8.el6_1 | RHSA-2011:0856 |
| RHEL 6 | java-1.6.0-sun +5 | 1:1.6.0.26-1jpp.1.el6 | RHSA-2011:0860 |
| RHEL 5 | java-1.6.0-openjdk +4 | 1:1.6.0.0-1.22.1.9.8.el5_6 | RHSA-2011:0857 |
| RHEL 5 | java-1.6.0-sun +5 | 1:1.6.0.26-1jpp.1.el5 | RHSA-2011:0860 |
| RHEL 4 | java-1.6.0-sun +5 | 1:1.6.0.26-1jpp.1.el4 | RHSA-2011:0860 |
Advisories 5
- RHSA-2011:0860 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2011:0856 Red Hat Security Advisory: java-1.6.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2011:0857 Red Hat Security Advisory: java-1.6.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- DSA-2358-1 openjdk-6 - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-2311-1 openjdk-6 - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-015/index.html
- GLSA-201406-32 vendor-advisory
- HPSBMU02799 vendor-advisory
- DSA-2311 vendor-advisory
- http://support.avaya.com/css/P8/documents/100144512
- http://www.oracle.com/technetwork/topics/security/javacpujune2011-313339.html
- 44818 third-party-advisory
- RHSA-2011:0856 vendor-advisory
- 44930 third-party-advisory
- oval:org.mitre.oval:def:14225 vdb-entry signature
- SSRT100591 vendor-advisory
- MDVSA-2011:126 vendor-advisory
- SSRT100867 vendor-advisory
- 49198 third-party-advisory
- oval:org.mitre.oval:def:14632 vdb-entry signature
- openSUSE-SU-2011:0633 vendor-advisory
- HPSBUX02777 vendor-advisory
- RHSA-2011:0860 vendor-advisory
- http://www.ibm.com/developerworks/java/jdk/alerts/
- RHSA-2011:0857 vendor-advisory