Description
Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1 before SR8 FP2 (6.1.8.2), 6 before SR16 FP2 (6.0.16.2), and before SR16 FP8 (5.0.16.8) allows local users to execute arbitrary code via vectors related to the shared classes cache.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | java-1.7.1-ibm +5 | 1:1.7.1.2.0-1jpp.3.el7_0 | RHSA-2014:1880 |
| RHEL 6 | java-1.5.0-ibm +6 | 1:1.5.0.16.8-1jpp.1.el6_6 | RHSA-2014:1881 |
| RHEL 6 | java-1.6.0-ibm +6 | 1:1.6.0.16.2-1jpp.1.el6_6 | RHSA-2014:1877 |
| RHEL 6 | java-1.7.0-ibm +5 | 1:1.7.0.8.0-1jpp.1.el6_6 | RHSA-2014:1882 |
| RHEL 6 | java-1.7.1-ibm +5 | 1:1.7.1.2.0-1jpp.3.el6_6 | RHSA-2014:1880 |
| RHEL 5 | java-1.5.0-ibm +7 | 1:1.5.0.16.8-1jpp.1.el5 | RHSA-2014:1881 |
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.16.2-1jpp.1.el5 | RHSA-2014:1877 |
| RHEL 5 | java-1.7.0-ibm +5 | 1:1.7.0.8.0-1jpp.1.el5 | RHSA-2014:1876 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Network Satellite 5 | java-1.6.0-ibm +1 | 1:1.6.0.16.3-1jpp.1.el5 | RHSA-2015:0264 |
Advisories 6
- RHSA-2015:0264 Red Hat Security Advisory: Red Hat Satellite IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:1881 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:1882 Red Hat Security Advisory: java-1.7.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:1880 Red Hat Security Advisory: java-1.7.1-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:1877 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:1876 Red Hat Security Advisory: java-1.7.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- RHSA-2014:1880 vendor-advisory
- RHSA-2014:1877 vendor-advisory
- IV66045 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21688283
- IV66044 vendor-advisory
- RHSA-2014:1881 vendor-advisory
- SUSE-SU-2014:1549 vendor-advisory
- SUSE-SU-2015:0376 vendor-advisory
- RHSA-2014:1876 vendor-advisory
- RHSA-2015:0264 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1162554
- SUSE-SU-2015:0392 vendor-advisory
- SUSE-SU-2014:1526 vendor-advisory
- SUSE-SU-2015:0345 vendor-advisory
- RHSA-2014:1882 vendor-advisory
- 71147 vdb-entry
- SUSE-SU-2015:0344 vendor-advisory