Description
Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 7 | openjdk-6 | 6b34-1.13.6-1~deb7u1 | DSA-3147-1 |
| Debian 7 | openjdk-7 | 7u75-2.5.4-1~deb7u1 | DSA-3144-1 |
| Debian 6.0 | openjdk-6 | 6b34-1.13.6-1~deb6u1 | DLA-157-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | openjdk-6 | 6b34-1.13.6-1ubuntu0.14.04.1 | — |
| Ubuntu 14.04 LTS | openjdk-7 | 7u75-2.5.4-1~trusty1 | USN-2487-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | java-1.6.0-openjdk +4 | 1:1.6.0.34-1.13.6.1.el7_0 | RHSA-2015:0085 |
| RHEL 7 | java-1.7.0-openjdk +6 | 1:1.7.0.75-2.5.4.2.el7_0 | RHSA-2015:0067 |
| RHEL 7 | java-1.7.1-ibm +5 | 1:1.7.1.2.10-1jpp.3.el7_0 | RHSA-2015:0133 |
| RHEL 6 | java-1.6.0-ibm +6 | 1:1.6.0.16.3-1jpp.1.el6_6 | RHSA-2015:0135 |
| RHEL 6 | java-1.6.0-openjdk +4 | 1:1.6.0.34-1.13.6.1.el6_6 | RHSA-2015:0085 |
| RHEL 6 | java-1.7.0-openjdk +4 | 1:1.7.0.75-2.5.4.0.el6_6 | RHSA-2015:0067 |
| RHEL 6 | java-1.7.1-ibm +5 | 1:1.7.1.2.10-1jpp.3.el6_6 | RHSA-2015:0133 |
| RHEL 6 | java-1.8.0-openjdk +5 | 1:1.8.0.31-1.b13.el6_6 | RHSA-2015:0069 |
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.16.3-1jpp.1.el5 | RHSA-2015:0135 |
| RHEL 5 | java-1.6.0-openjdk +4 | 1:1.6.0.34-1.13.6.1.el5_11 | RHSA-2015:0085 |
| RHEL 5 | java-1.7.0-ibm +5 | 1:1.7.0.8.10-1jpp.4.el5 | RHSA-2015:0134 |
| RHEL 5 | java-1.7.0-openjdk +4 | 1:1.7.0.75-2.5.4.0.el5_11 | RHSA-2015:0068 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Extras Oracle Java 7 | java-1.6.0-sun +5 | 1:1.6.0.91-1jpp.1.el7 | RHSA-2015:0086 |
| Red Hat Rhel Extras Oracle Java 7 | java-1.7.0-oracle +5 | 1:1.7.0.75-1jpp.2.el7 | RHSA-2015:0079 |
| Red Hat Rhel Extras Oracle Java 6 | java-1.6.0-sun +5 | 1:1.6.0.91-1jpp.1.el6 | RHSA-2015:0086 |
| Red Hat Rhel Extras Oracle Java 6 | java-1.7.0-oracle +5 | 1:1.7.0.75-1jpp.1.el6 | RHSA-2015:0079 |
| Red Hat Rhel Extras Oracle Java 6 | java-1.8.0-oracle +5 | 1:1.8.0.31-1jpp.1.el6 | RHSA-2015:0080 |
| Red Hat Rhel Extras Oracle Java 5 | java-1.6.0-sun +5 | 1:1.6.0.91-1jpp.1.el5_11 | RHSA-2015:0086 |
| Red Hat Rhel Extras Oracle Java 5 | java-1.7.0-oracle +5 | 1:1.7.0.75-1jpp.1.el5_11 | RHSA-2015:0079 |
| Red Hat Network Satellite 5 | java-1.6.0-ibm +1 | 1:1.6.0.16.3-1jpp.1.el5 | RHSA-2015:0264, RHSA-2015:0263 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 | java-1_7_0-openjdk | 1.7.0.75-11.3 | SUSE-SU-2015:0503-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 | java-1_7_0-openjdk | 1.7.0.75-11.3 | SUSE-SU-2015:0503-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | java-1_7_0-openjdk | 1.7.0.121-1.1 | openSUSE-SU-2024:10534-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | java-1.6.0-openjdk +4 | 1:1.6.0.34-1.13.6.1.0.1.el5_11 | ELSA-2015-0085 |
| Oracle Linux 7 | java-1.7.0-openjdk +6 | 1:1.7.0.75-2.5.4.2.0.1.el7_0 | ELSA-2015-0067 |
Advisories 21
- RHSA-2015:0264 Red Hat Security Advisory: Red Hat Satellite IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0263 Red Hat Security Advisory: Red Hat Satellite IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0134 Red Hat Security Advisory: java-1.7.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0135 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0133 Red Hat Security Advisory: java-1.7.1-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0085 Red Hat Security Advisory: java-1.6.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0086 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0080 Red Hat Security Advisory: java-1.8.0-oracle security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0079 Red Hat Security Advisory: java-1.7.0-oracle security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0069 Red Hat Security Advisory: java-1.8.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0068 Red Hat Security Advisory: java-1.7.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0067 Red Hat Security Advisory: java-1.7.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- USN-2487-1 openjdk-7 vulnerabilities Ubuntu Security Notices (USN) · May 29, 2026
- DLA-157-1 openjdk-6 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3144-1 openjdk-7 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3147-1 openjdk-6 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2015:0503-1 Security update for java-1_7_0-openjdk SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10534-1 java-1_7_0-openjdk-1.7.0.121-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2025-1658 Oracle Java SE und Oracle JRockit : Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 28, 2025
- ELSA-2015-0085 Important: java-1.6.0-openjdk security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Jan 26, 2015
- ELSA-2015-0067 Critical: java-1.7.0-openjdk security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Jan 21, 2015
References
- SUSE-SU-2015:0503 vendor-advisory
- 72136 vdb-entry
- DSA-3144 vendor-advisory
- RHSA-2015:0079 vendor-advisory
- http://www.vmware.com/security/advisories/VMSA-2015-0003.html
- http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
- RHSA-2015:0264 vendor-advisory
- USN-2487-1 vendor-advisory
- RHSA-2015:0085 vendor-advisory
- RHSA-2015:0086 vendor-advisory
- GLSA-201603-14 vendor-advisory
- SUSE-SU-2015:0336 vendor-advisory
- oracle-cpujan2015-cve20150412(100140) vdb-entry
- RHSA-2015:0080 vendor-advisory
- https://www-304.ibm.com/support/docview.wss?uid=swg21695474
- RHSA-2015:0068 vendor-advisory
- USN-2486-1 vendor-advisory
- GLSA-201507-14 vendor-advisory
- SSRT101951 vendor-advisory
- HPSBUX03281 vendor-advisory
- SSRT101968 vendor-advisory
- openSUSE-SU-2015:0190 vendor-advisory
- 1031580 vdb-entry
- DSA-3147 vendor-advisory