Description
Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect integrity via unknown vectors related to Hotspot.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 8 | openjdk-7 | 7u79-2.5.5-1~deb8u1 | DSA-3316-1, DSA-3235-1 |
| Debian 7 | openjdk-6 | 6b35-1.13.7-1~deb7u1 | DSA-3234-1 |
| Debian 7 | openjdk-7 | 7u79-2.5.5-1~deb7u1 | DSA-3316-1, DSA-3235-1 |
| Debian 6.0 | openjdk-6 | 6b35-1.13.7-1~deb6u1 | DLA-213-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | java-1.8.0-openjdk +6 | 1:1.8.0.45-30.b13.ael7b_1 | RHSA-2015:0809 |
| RHEL 6 | java-1.8.0-openjdk +5 | 1:1.8.0.45-28.b13.el6_6 | RHSA-2015:0809 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Extras Oracle Java 7 | java-1.8.0-oracle +5 | 1:1.8.0.45-1jpp.2.el7_1 | RHSA-2015:0854 |
| Red Hat Rhel Extras Oracle Java 6 | java-1.8.0-oracle +5 | 1:1.8.0.45-1jpp.2.el6_6 | RHSA-2015:0854 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | java-1.8.0-openjdk +6 | 1:1.8.0.45-30.b13.el7_1 | ELSA-2015-0809 |
Advisories 7
- RHSA-2015:0854 Red Hat Security Advisory: java-1.8.0-oracle security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0809 Red Hat Security Advisory: java-1.8.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- DSA-3316-1 openjdk-7 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-213-1 openjdk-6 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3235-1 openjdk-7 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3234-1 openjdk-6 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- ELSA-2015-0809 Important: java-1.8.0-openjdk security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Apr 15, 2015
References
- DSA-3235 vendor-advisory
- 74149 vdb-entry
- DSA-3316 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
- 1032120 vdb-entry
- GLSA-201603-11 vendor-advisory
- openSUSE-SU-2015:0773 vendor-advisory
- DSA-3234 vendor-advisory
- RHSA-2015:0809 vendor-advisory
- RHSA-2015:0854 vendor-advisory