Description
Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attackers to bypass intended access permissions and obtain sensitive information via unspecified vectors related to the security manager.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | java-1.7.1-ibm +5 | 1:1.7.1.2.10-1jpp.3.el7_0 | RHSA-2015:0133 |
| RHEL 6 | java-1.5.0-ibm +6 | 1:1.5.0.16.9-1jpp.1.el6_6 | RHSA-2015:0136 |
| RHEL 6 | java-1.6.0-ibm +6 | 1:1.6.0.16.3-1jpp.1.el6_6 | RHSA-2015:0135 |
| RHEL 6 | java-1.7.1-ibm +5 | 1:1.7.1.2.10-1jpp.3.el6_6 | RHSA-2015:0133 |
| RHEL 5 | java-1.5.0-ibm +7 | 1:1.5.0.16.9-1jpp.1.el5 | RHSA-2015:0136 |
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.16.3-1jpp.1.el5 | RHSA-2015:0135 |
| RHEL 5 | java-1.7.0-ibm +5 | 1:1.7.0.8.10-1jpp.4.el5 | RHSA-2015:0134 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Network Satellite 5 | java-1.6.0-ibm +1 | 1:1.6.0.16.3-1jpp.1.el5 | RHSA-2015:0264, RHSA-2015:0263 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 | java-1_6_0-ibm | 1.6.0_sr16.3-12.1 | SUSE-SU-2015:0306-1 |
| SLES 12 | java-1_7_1-ibm | 1.7.1_sr2.10-8.1 | SUSE-SU-2015:0304-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 | java-1_7_1-ibm | 1.7.1_sr2.10-8.1 | SUSE-SU-2015:0304-1 |
Advisories 8
- RHSA-2015:0264 Red Hat Security Advisory: Red Hat Satellite IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0263 Red Hat Security Advisory: Red Hat Satellite IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0136 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0134 Red Hat Security Advisory: java-1.7.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0135 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0133 Red Hat Security Advisory: java-1.7.1-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- SUSE-SU-2015:0304-1 Security update for java-1_7_1-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:0306-1 Security update for java-1_6_0-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
References
- http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_February_2015
- RHSA-2015:0136 vendor-advisory
- 73259 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1189145
- SUSE-SU-2015:0376 vendor-advisory
- RHSA-2015:0264 vendor-advisory
- SUSE-SU-2015:0392 vendor-advisory
- SUSE-SU-2015:0345 vendor-advisory
- SUSE-SU-2015:0343 vendor-advisory
- https://www-304.ibm.com/support/docview.wss?uid=swg21695474
- SUSE-SU-2015:0306 vendor-advisory
- SUSE-SU-2015:1073 vendor-advisory
- SUSE-SU-2015:0344 vendor-advisory
- SUSE-SU-2015:0304 vendor-advisory