Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and availability, related to AWT.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 6.0 | openjdk-6 | 6b18-1.8.13-0+squeeze1 | DSA-2420-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | java-1.5.0-ibm +6 | 1:1.5.0.13.1-1jpp.2.el6_2 | RHSA-2012:0508 |
| RHEL 6 | java-1.6.0-ibm +6 | 1:1.6.0.10.1-1jpp.5.el6_2 | RHSA-2012:0514 |
| RHEL 6 | java-1.6.0-openjdk +4 | 1:1.6.0.0-1.43.1.10.6.el6_2 | RHSA-2012:0135 |
| RHEL 6 | java-1.6.0-sun +5 | 1:1.6.0.31-1jpp.1.el6_2 | RHSA-2012:0139 |
| RHEL 5 | java-1.4.2-ibm +6 | 1.4.2.13.12-1jpp.1.el5_8 | RHSA-2012:0702 |
| RHEL 5 | java-1.4.2-ibm-sap +4 | 1.4.2.13.12.sap-1jpp.2.el5 | RHSA-2012:1080 |
| RHEL 5 | java-1.5.0-ibm +7 | 1:1.5.0.13.1-1jpp.1.el5 | RHSA-2012:0508 |
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.10.1-1jpp.1.el5 | RHSA-2012:0514 |
| RHEL 5 | java-1.6.0-openjdk +4 | 1:1.6.0.0-1.25.1.10.6.el5_8 | RHSA-2012:0322 |
| RHEL 5 | java-1.6.0-sun +5 | 1:1.6.0.31-1jpp.1.el5 | RHSA-2012:0139 |
| RHEL 4 | java-1.6.0-sun +5 | 1:1.6.0.31-1jpp.1.el4 | RHSA-2012:0139 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Network Satellite 5 | java-1.6.0-ibm +1 | 1:1.6.0.14.0-1jpp.1.el5_9 | RHSA-2013:1455 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | java-1_7_0-openjdk | 1.7.0.121-1.1 | openSUSE-SU-2024:10534-1 |
Advisories 10
- RHSA-2013:1455 Red Hat Security Advisory: Red Hat Network Satellite server IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2012:0514 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2012:0139 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2012:0322 Red Hat Security Advisory: java-1.6.0-openjdk security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2012:0135 Red Hat Security Advisory: java-1.6.0-openjdk security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2012:1080 Red Hat Security Advisory: java-1.4.2-ibm-sap security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2012:0702 Red Hat Security Advisory: java-1.4.2-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2012:0508 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- DSA-2420-1 openjdk-6 - several Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10534-1 java-1_7_0-openjdk-1.7.0.121-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 48074 third-party-advisory
- HPSBUX02784 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html
- SUSE-SU-2012:1013 vendor-advisory
- GLSA-201406-32 vendor-advisory
- 48692 third-party-advisory
- HPSBMU02799 vendor-advisory
- SUSE-SU-2012:0881 vendor-advisory
- 48589 third-party-advisory
- SSRT100805 vendor-advisory
- SUSE-SU-2012:0734 vendor-advisory
- SUSE-SU-2012:0602 vendor-advisory
- RHSA-2013:1455 vendor-advisory
- SUSE-SU-2012:0603 vendor-advisory
- 48073 third-party-advisory
- 48950 third-party-advisory
- 52011 vdb-entry
- 48948 third-party-advisory
- 48915 third-party-advisory
- HPSBUX02757 vendor-advisory
- oval:org.mitre.oval:def:14900 vdb-entry signature
- DSA-2420 vendor-advisory
- RHSA-2012:0508 vendor-advisory
- SSRT100867 vendor-advisory
- 49198 third-party-advisory
- RHSA-2012:0514 vendor-advisory
- RHSA-2012:1080 vendor-advisory
- HPSBUX02777 vendor-advisory
- RHSA-2012:0702 vendor-advisory