Description
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, when running on Windows, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | java-1.6.0-ibm +6 | 1:1.6.0.10.0-1jpp.2.el6 | RHSA-2012:0034 |
| RHEL 6 | java-1.6.0-sun +5 | 1:1.6.0.29-1jpp.1.el6 | RHSA-2011:1384 |
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.10.0-1jpp.2.el5 | RHSA-2012:0034 |
| RHEL 5 | java-1.6.0-sun +5 | 1:1.6.0.29-1jpp.1.el5 | RHSA-2011:1384 |
| RHEL 4 | java-1.6.0-ibm +6 | 1:1.6.0.10.0-1jpp.2.el4 | RHSA-2012:0034 |
| RHEL 4 | java-1.6.0-sun +5 | 1:1.6.0.29-1jpp.1.el4 | RHSA-2011:1384 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Network Satellite 5 | java-1.6.0-ibm +1 | 1:1.6.0.14.0-1jpp.1.el5_9 | RHSA-2013:1455 |
Advisories 3
- RHSA-2013:1455 Red Hat Security Advisory: Red Hat Network Satellite server IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2012:0034 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2011:1384 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- HPSBMU02799 vendor-advisory
- 48308 third-party-advisory
- HPSBUX02730 vendor-advisory
- oracle-jre-deployment-unspec(70851) vdb-entry
- SUSE-SU-2012:0114 vendor-advisory
- RHSA-2013:1455 vendor-advisory
- RHSA-2011:1384 vendor-advisory
- 50229 vdb-entry
- oval:org.mitre.oval:def:14273 vdb-entry signature
- http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html
- SSRT100867 vendor-advisory
- 1026215 vdb-entry
- http://www.ibm.com/developerworks/java/jdk/alerts/