Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | java-1.7.0-ibm +5 | 1:1.7.0.2.0-1jpp.3.el6_3 | RHSA-2012:1289 |
| RHEL 6 | java-1.7.0-openjdk +4 | 1:1.7.0.5-2.2.1.el6_3 | RHSA-2012:1009 |
| RHEL 6 | java-1.7.0-oracle +4 | 1:1.7.0.5-1jpp.1.el6 | RHSA-2012:1019 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | java-1_7_0-openjdk | 1.7.0.121-1.1 | openSUSE-SU-2024:10534-1 |
Advisories 4
- RHSA-2012:1289 Red Hat Security Advisory: java-1.7.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2012:1019 Red Hat Security Advisory: java-1.7.0-oracle security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2012:1009 Red Hat Security Advisory: java-1.7.0-openjdk security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- openSUSE-SU-2024:10534-1 java-1_7_0-openjdk-1.7.0.121-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- GLSA-201406-32 vendor-advisory
- SUSE-SU-2012:1231 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html
- SSRT100919 vendor-advisory
- oval:org.mitre.oval:def:16699 vdb-entry signature
- 53948 vdb-entry