Description
Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 7 | openjdk-6 | 6b33-1.13.5-2~deb7u1 | DSA-3077-1 |
| Debian 7 | openjdk-7 | 7u71-2.5.3-2~deb7u1 | DSA-3080-1 |
| Debian 6.0 | openjdk-6 | 6b33-1.13.5-2~deb6u1 | DLA-96-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | openjdk-6 | 6b33-1.13.5-1ubuntu0.14.04 | — |
| Ubuntu 14.04 LTS | openjdk-7 | 7u71-2.5.3-0ubuntu0.14.04.1 | USN-2388-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | java-1.6.0-openjdk +4 | 1:1.6.0.33-1.13.5.0.el7_0 | RHSA-2014:1634 |
| RHEL 7 | java-1.7.0-openjdk +6 | 1:1.7.0.71-2.5.3.1.el7_0 | RHSA-2014:1620 |
| RHEL 7 | java-1.7.1-ibm +5 | 1:1.7.1.2.0-1jpp.3.el7_0 | RHSA-2014:1880 |
| RHEL 6 | java-1.5.0-ibm +6 | 1:1.5.0.16.8-1jpp.1.el6_6 | RHSA-2014:1881 |
| RHEL 6 | java-1.6.0-ibm +6 | 1:1.6.0.16.2-1jpp.1.el6_6 | RHSA-2014:1877 |
| RHEL 6 | java-1.6.0-openjdk +4 | 1:1.6.0.33-1.13.5.0.el6_6 | RHSA-2014:1634 |
| RHEL 6 | java-1.7.0-ibm +5 | 1:1.7.0.8.0-1jpp.1.el6_6 | RHSA-2014:1882 |
| RHEL 6 | java-1.7.0-openjdk +4 | 1:1.7.0.71-2.5.3.1.el6 | RHSA-2014:1620 |
| RHEL 6 | java-1.7.1-ibm +5 | 1:1.7.1.2.0-1jpp.3.el6_6 | RHSA-2014:1880 |
| RHEL 6 | java-1.8.0-openjdk +5 | 1.8.0.25-1.b17.el6 | RHSA-2014:1636 |
| RHEL 5 | java-1.5.0-ibm +7 | 1:1.5.0.16.8-1jpp.1.el5 | RHSA-2014:1881 |
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.16.2-1jpp.1.el5 | RHSA-2014:1877 |
| RHEL 5 | java-1.6.0-openjdk +4 | 1:1.6.0.33-1.13.5.0.el5_11 | RHSA-2014:1634 |
| RHEL 5 | java-1.7.0-ibm +5 | 1:1.7.0.8.0-1jpp.1.el5 | RHSA-2014:1876 |
| RHEL 5 | java-1.7.0-openjdk +4 | 1:1.7.0.71-2.5.3.1.el5_11 | RHSA-2014:1633 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Extras Oracle Java 7 | java-1.6.0-sun +5 | 1:1.6.0.85-1jpp.2.el7 | RHSA-2014:1658 |
| Red Hat Rhel Extras Oracle Java 7 | java-1.7.0-oracle +5 | 1:1.7.0.72-1jpp.2.el7 | RHSA-2014:1657 |
| Red Hat Rhel Extras Oracle Java 6 | java-1.6.0-sun +5 | 1:1.6.0.85-1jpp.2.el6 | RHSA-2014:1658 |
| Red Hat Rhel Extras Oracle Java 6 | java-1.7.0-oracle +5 | 1:1.7.0.72-1jpp.2.el6 | RHSA-2014:1657 |
| Red Hat Rhel Extras Oracle Java 5 | java-1.6.0-sun +5 | 1:1.6.0.85-1jpp.3.el5_11 | RHSA-2014:1658 |
| Red Hat Rhel Extras Oracle Java 5 | java-1.7.0-oracle +5 | 1:1.7.0.72-1jpp.4.el5_11 | RHSA-2014:1657 |
| Red Hat Network Satellite 5 | java-1.6.0-ibm +1 | 1:1.6.0.16.3-1jpp.1.el5 | RHSA-2015:0264 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | java-1_7_0-openjdk | 1.7.0.121-1.1 | openSUSE-SU-2024:10534-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | java-1.6.0-openjdk +4 | 1:1.6.0.33-1.13.5.0.0.1.el5_11 | ELSA-2014-1634 |
| Oracle Linux 7 | java-1.7.0-openjdk +6 | 1:1.7.0.71-2.5.3.1.0.1.el7_0 | ELSA-2014-1620 |
Advisories 19
- RHSA-2015:0264 Red Hat Security Advisory: Red Hat Satellite IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:1881 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:1882 Red Hat Security Advisory: java-1.7.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:1880 Red Hat Security Advisory: java-1.7.1-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:1877 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:1876 Red Hat Security Advisory: java-1.7.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:1657 Red Hat Security Advisory: java-1.7.0-oracle security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:1658 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:1636 Red Hat Security Advisory: java-1.8.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:1633 Red Hat Security Advisory: java-1.7.0-openjdk security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:1634 Red Hat Security Advisory: java-1.6.0-openjdk security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2014:1620 Red Hat Security Advisory: java-1.7.0-openjdk security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- DLA-96-1 openjdk-6 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3080-1 openjdk-7 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3077-1 openjdk-6 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- USN-2388-1 openjdk-7 vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- openSUSE-SU-2024:10534-1 java-1_7_0-openjdk-1.7.0.121-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- ELSA-2014-1620 Important: java-1.7.0-openjdk security and bug fix update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Oct 15, 2014
- ELSA-2014-1634 Important: java-1.6.0-openjdk security and bug fix update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Oct 14, 2014
References
- 60414 third-party-advisory
- RHSA-2014:1880 vendor-advisory
- RHSA-2014:1657 vendor-advisory
- RHSA-2014:1877 vendor-advisory
- 61609 third-party-advisory
- 61928 third-party-advisory
- 61163 third-party-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21688283
- USN-2386-1 vendor-advisory
- http://linux.oracle.com/errata/ELSA-2014-1633.html
- USN-2388-1 vendor-advisory
- HPSBUX03218 vendor-advisory
- RHSA-2014:1881 vendor-advisory
- 61629 third-party-advisory
- SUSE-SU-2014:1549 vendor-advisory
- 61018 third-party-advisory
- SUSE-SU-2015:0376 vendor-advisory
- RHSA-2014:1876 vendor-advisory
- http://linux.oracle.com/errata/ELSA-2014-1634.html
- 61346 third-party-advisory
- RHSA-2015:0264 vendor-advisory
- RHSA-2014:1634 vendor-advisory
- USN-2388-2 vendor-advisory
- SUSE-SU-2014:1422 vendor-advisory
- DSA-3080 vendor-advisory
- SUSE-SU-2015:0392 vendor-advisory
- SUSE-SU-2014:1526 vendor-advisory
- SUSE-SU-2015:0345 vendor-advisory
- 60416 third-party-advisory
- RHSA-2014:1882 vendor-advisory
- RHSA-2014:1633 vendor-advisory
- RHSA-2014:1636 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- RHSA-2014:1658 vendor-advisory
- 61164 third-party-advisory
- DSA-3077 vendor-advisory
- http://linux.oracle.com/errata/ELSA-2014-1636
- GLSA-201502-12 vendor-advisory
- 61020 third-party-advisory
- 70556 vdb-entry
- 61143 third-party-advisory
- SUSE-SU-2015:0344 vendor-advisory
- 60417 third-party-advisory
- RHSA-2014:1620 vendor-advisory