Description
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to HotSpot.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | java-1.6.0-openjdk +4 | 1:1.6.0.0-1.40.1.9.10.el6_1 | RHSA-2011:1380 |
| RHEL 6 | java-1.6.0-sun +5 | 1:1.6.0.29-1jpp.1.el6 | RHSA-2011:1384 |
| RHEL 5 | java-1.6.0-openjdk +4 | 1:1.6.0.0-1.23.1.9.10.el5_7 | RHSA-2011:1380 |
| RHEL 5 | java-1.6.0-sun +5 | 1:1.6.0.29-1jpp.1.el5 | RHSA-2011:1384 |
| RHEL 4 | java-1.6.0-sun +5 | 1:1.6.0.29-1jpp.1.el4 | RHSA-2011:1384 |
Advisories 2
- RHSA-2011:1380 Red Hat Security Advisory: java-1.6.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2011:1384 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- GLSA-201406-32 vendor-advisory
- HPSBMU02799 vendor-advisory
- 50242 vdb-entry
- 48308 third-party-advisory
- HPSBUX02730 vendor-advisory
- RHSA-2011:1384 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html
- SSRT100867 vendor-advisory
- 76510 vdb-entry
- 1026215 vdb-entry
- USN-1263-1 vendor-advisory
- oval:org.mitre.oval:def:13475 vdb-entry signature
- http://www.ibm.com/developerworks/java/jdk/alerts/
- oracle-java-hotspot-info-disc(70835) vdb-entry