Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via unknown vectors related to Deserialization.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 6.0 | openjdk-6 | 6b18-1.8.9-0.1~squeeze1 | DSA-2311-1 |
| Debian 5.0 | openjdk-6 | 6b18-1.8.10-0~lenny2 | DSA-2358-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | java-1.5.0-ibm +6 | 1:1.5.0.12.5-1jpp.1.el6 | RHSA-2011:1087 |
| RHEL 6 | java-1.6.0-ibm +6 | 1:1.6.0.9.2-1jpp.2.el6 | RHSA-2011:0938 |
| RHEL 6 | java-1.6.0-openjdk +4 | 1:1.6.0.0-1.39.1.9.8.el6_1 | RHSA-2011:0856 |
| RHEL 6 | java-1.6.0-sun +5 | 1:1.6.0.26-1jpp.1.el6 | RHSA-2011:0860 |
| RHEL 5 | java-1.4.2-ibm +6 | 1.4.2.13.10-1jpp.1.el5 | RHSA-2011:1159 |
| RHEL 5 | java-1.4.2-ibm-sap +4 | 1.4.2.13.10.sap-1jpp.1.el5 | RHSA-2011:1265 |
| RHEL 5 | java-1.5.0-ibm +7 | 1:1.5.0.12.5-1jpp.1.el5 | RHSA-2011:1087 |
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.9.2-1jpp.2.el5 | RHSA-2011:0938 |
| RHEL 5 | java-1.6.0-openjdk +4 | 1:1.6.0.0-1.22.1.9.8.el5_6 | RHSA-2011:0857 |
| RHEL 5 | java-1.6.0-sun +5 | 1:1.6.0.26-1jpp.1.el5 | RHSA-2011:0860 |
| RHEL 4 | java-1.4.2-ibm +6 | 1.4.2.13.10-1jpp.1.el4 | RHSA-2011:1159 |
| RHEL 4 | java-1.4.2-ibm-sap +4 | 1.4.2.13.10.sap-1jpp.1.el4_8 | RHSA-2011:1265 |
| RHEL 4 | java-1.5.0-ibm +6 | 1:1.5.0.12.5-1jpp.1.el4 | RHSA-2011:1087 |
| RHEL 4 | java-1.6.0-ibm +6 | 1:1.6.0.9.2-1jpp.2.el4 | RHSA-2011:0938 |
| RHEL 4 | java-1.6.0-sun +5 | 1:1.6.0.26-1jpp.1.el4 | RHSA-2011:0860 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Network Satellite 5 | java-1.6.0-ibm +1 | 1:1.6.0.14.0-1jpp.1.el5_9 | RHSA-2013:1455 |
Advisories 10
- RHSA-2013:1455 Red Hat Security Advisory: Red Hat Network Satellite server IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2011:1265 Red Hat Security Advisory: java-1.4.2-ibm-sap security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2011:1159 Red Hat Security Advisory: java-1.4.2-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2011:1087 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2011:0938 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2011:0860 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2011:0856 Red Hat Security Advisory: java-1.6.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2011:0857 Red Hat Security Advisory: java-1.6.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- DSA-2358-1 openjdk-6 - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-2311-1 openjdk-6 - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-015/index.html
- SUSE-SU-2011:0863 vendor-advisory
- GLSA-201406-32 vendor-advisory
- HPSBMU02799 vendor-advisory
- oval:org.mitre.oval:def:14081 vdb-entry signature
- RHSA-2011:1087 vendor-advisory
- TA11-201A third-party-advisory
- SUSE-SA:2011:036 vendor-advisory
- DSA-2311 vendor-advisory
- RHSA-2011:1159 vendor-advisory
- http://support.avaya.com/css/P8/documents/100144512
- SUSE-SA:2011:032 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/javacpujune2011-313339.html
- RHSA-2013:1455 vendor-advisory
- 44818 third-party-advisory
- RHSA-2011:0856 vendor-advisory
- SUSE-SU-2011:0966 vendor-advisory
- RHSA-2011:0938 vendor-advisory
- 44930 third-party-advisory
- oval:org.mitre.oval:def:14463 vdb-entry signature
- SUSE-SA:2011:030 vendor-advisory
- SSRT100591 vendor-advisory
- MDVSA-2011:126 vendor-advisory
- SSRT100867 vendor-advisory
- 49198 third-party-advisory
- SUSE-SU-2011:0807 vendor-advisory
- openSUSE-SU-2011:0633 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html
- HPSBUX02777 vendor-advisory
- RHSA-2011:1265 vendor-advisory
- RHSA-2011:0860 vendor-advisory
- http://www.ibm.com/developerworks/java/jdk/alerts/
- RHSA-2011:0857 vendor-advisory