Description
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4893 and CVE-2015-4911.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 8 | openjdk-7 | 7u85-2.6.1-6~deb8u1 | DSA-3381-1 |
| Debian 7 | openjdk-6 | 6b38-1.13.10-1~deb7u1 | DSA-3465-1 |
| Debian 7 | openjdk-7 | 7u85-2.6.1-6~deb7u1 | DSA-3381-1 |
| Debian 6.0 | openjdk-6 | 6b37-1.13.9-1~deb6u1 | DLA-346-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | openjdk-6 | 6b37-1.13.9-1ubuntu0.14.04.1 | — |
| Ubuntu 14.04 LTS | openjdk-7 | 7u85-2.6.1-5ubuntu0.14.04.1 | USN-2784-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | java-1.6.0-openjdk +4 | 1:1.6.0.37-1.13.9.4.el7_1 | RHSA-2015:2086 |
| RHEL 7 | java-1.7.0-openjdk +6 | 1:1.7.0.91-2.6.2.1.ael7b_1 | RHSA-2015:1920 |
| RHEL 7 | java-1.7.1-ibm +5 | 1:1.7.1.3.20-1jpp.1.el7 | RHSA-2015:2506 |
| RHEL 7 | java-1.8.0-ibm +5 | 1:1.8.0.2.0-1jpp.1.el7 | RHSA-2015:2509 |
| RHEL 7 | java-1.8.0-openjdk +6 | 1:1.8.0.65-2.b17.ael7b_1 | RHSA-2015:1919 |
| RHEL 6 | java-1.6.0-ibm +6 | 1:1.6.0.16.15-1jpp.1.el6_7 | RHSA-2015:2508 |
| RHEL 6 | java-1.6.0-openjdk +4 | 1:1.6.0.37-1.13.9.4.el6_7 | RHSA-2015:2086 |
| RHEL 6 | java-1.7.0-openjdk +4 | 1:1.7.0.91-2.6.2.2.el6_7 | RHSA-2015:1920 |
| RHEL 6 | java-1.7.1-ibm +5 | 1:1.7.1.3.20-1jpp.1.el6_7 | RHSA-2015:2506 |
| RHEL 6 | java-1.8.0-openjdk +11 | 1:1.8.0.65-0.b17.el6_7 | RHSA-2015:1919 |
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.16.15-1jpp.1.el5 | RHSA-2015:2508 |
| RHEL 5 | java-1.6.0-openjdk +4 | 1:1.6.0.37-1.13.9.4.el5_11 | RHSA-2015:2086 |
| RHEL 5 | java-1.7.0-ibm +5 | 1:1.7.0.9.20-1jpp.1.el5 | RHSA-2015:2507 |
| RHEL 5 | java-1.7.0-openjdk +4 | 1:1.7.0.91-2.6.2.1.el5_11 | RHSA-2015:1921 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Extras Oracle Java 7 | java-1.6.0-sun +5 | 1:1.6.0.105-1jpp.2.el7_1 | RHSA-2015:1928 |
| Red Hat Rhel Extras Oracle Java 7 | java-1.7.0-oracle +5 | 1:1.7.0.91-1jpp.1.el7_1 | RHSA-2015:1927 |
| Red Hat Rhel Extras Oracle Java 7 | java-1.8.0-oracle +5 | 1:1.8.0.65-1jpp.3.el7_1 | RHSA-2015:1926 |
| Red Hat Rhel Extras Oracle Java 6 | java-1.6.0-sun +5 | 1:1.6.0.105-1jpp.2.el6_7 | RHSA-2015:1928 |
| Red Hat Rhel Extras Oracle Java 6 | java-1.7.0-oracle +5 | 1:1.7.0.91-1jpp.1.el6_7 | RHSA-2015:1927 |
| Red Hat Rhel Extras Oracle Java 6 | java-1.8.0-oracle +5 | 1:1.8.0.65-1jpp.3.el6_7 | RHSA-2015:1926 |
| Red Hat Rhel Extras Oracle Java 5 | java-1.6.0-sun +5 | 1:1.6.0.105-1jpp.2.el5_11 | RHSA-2015:1928 |
| Red Hat Rhel Extras Oracle Java 5 | java-1.7.0-oracle +5 | 1:1.7.0.91-1jpp.1.el5_11 | RHSA-2015:1927 |
| Red Hat Network Satellite 5 | java-1.7.0-ibm +1 | 1:1.7.0.9.40-1jpp.1.el5 | RHSA-2016:1430 |
| Red Hat Network Satellite 5 | java-1.7.1-ibm +1 | 1:1.7.1.3.40-1jpp.1.el6_7 | RHSA-2016:1430 |
| Red Hat Network Satellite 5 | spacewalk-java +5 | 2.0.2-109.el5sat | RHSA-2016:1430 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP1 | java-1_7_1-ibm | 1.7.1_sr3.20-18.1 | SUSE-SU-2015:2168-2 |
| SLES 12 SP1 | java-1_8_0-ibm | 1.8.0_sr2.0-4.1 | SUSE-SU-2015:2268-1 |
| SLES 12 | java-1_6_0-ibm | 1.6.0_sr16.15-27.1 | SUSE-SU-2015:2192-1 |
| SLES 12 | java-1_7_0-openjdk | 1.7.0.91-21.2 | SUSE-SU-2015:1874-2, SUSE-SU-2015:1874-1 |
| SLES 12 | java-1_7_1-ibm | 1.7.1_sr3.20-18.1 | SUSE-SU-2015:2168-1 |
| SLES 11 SP4 | java-1_7_0-openjdk | 1.7.0.91-0.14.2 | SUSE-SU-2015:1875-2, SUSE-SU-2015:1875-1 |
| SLES 11 SP4 | java-1_7_1-ibm | 1.7.1_sr3.20-6.1 | SUSE-SU-2015:2182-1 |
| SLES 11 SP3 | java-1_6_0-ibm | 1.6.0_sr16.15-46.1 | SUSE-SU-2015:2166-1 |
| SLES 11 SP3 | java-1_7_0-ibm | 1.7.0_sr9.20-42.1 | SUSE-SU-2015:2216-1 |
| SLES 11 SP3 | java-1_7_0-openjdk | 1.7.0.91-0.14.2 | SUSE-SU-2015:1875-2, SUSE-SU-2015:1875-1 |
| SLES 11 SP2 | java-1_6_0-ibm | 1.6.0_sr16.15-46.1 | SUSE-SU-2015:2166-1 |
| SLES 11 SP2 | java-1_7_0-ibm | 1.7.0_sr9.20-42.1 | SUSE-SU-2015:2216-1 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP1 | java-1_7_1-ibm | 1.7.1_sr3.20-18.1 | SUSE-SU-2015:2168-2 |
| SLES for SAP 12 SP1 | java-1_8_0-ibm | 1.8.0_sr2.0-4.1 | SUSE-SU-2015:2268-1 |
| SLES for SAP 12 | java-1_7_0-openjdk | 1.7.0.91-21.2 | SUSE-SU-2015:1874-2, SUSE-SU-2015:1874-1 |
| SLES for SAP 12 | java-1_7_1-ibm | 1.7.1_sr3.20-18.1 | SUSE-SU-2015:2168-1 |
| SLES for SAP 11 SP4 | java-1_7_1-ibm | 1.7.1_sr3.20-6.1 | SUSE-SU-2015:2182-1 |
| SLES for SAP 11 SP3 | java-1_6_0-ibm | 1.6.0_sr16.15-46.1 | SUSE-SU-2015:2166-1 |
| SLES for SAP 11 SP3 | java-1_7_0-ibm | 1.7.0_sr9.20-42.1 | SUSE-SU-2015:2216-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | java-1_7_0-openjdk | 1.7.0.121-1.1 | openSUSE-SU-2024:10534-1 |
| openSUSE Tumbleweed | java-1_8_0-openjdk | 1.8.0.111-1.1 | openSUSE-SU-2024:10197-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | java-1.6.0-openjdk +4 | 1:1.6.0.37-1.13.9.4.0.1.el5_11 | ELSA-2015-2086 |
| Oracle Linux 7 | java-1.7.0-openjdk +4 | 1:1.7.0.91-2.6.2.2.0.1.el6_7 | ELSA-2015-1920 |
| Oracle Linux 7 | java-1.7.0-openjdk-headless +1 | 1:1.7.0.91-2.6.2.1.0.1.el7_1 | ELSA-2015-1920 |
| Oracle Linux 7 | java-1.8.0-openjdk +6 | 1:1.8.0.65-2.b17.el7_1 | ELSA-2015-1919 |
| Oracle Linux 7 | java-1.8.0-openjdk-debug +5 | 1:1.8.0.65-0.b17.el6_7 | ELSA-2015-1919 |
Advisories 32
- RHSA-2016:1430 Red Hat Security Advisory: java-1.7.0-ibm and java-1.7.1-ibm security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2015:2509 Red Hat Security Advisory: java-1.8.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:2508 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:2506 Red Hat Security Advisory: java-1.7.1-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:2507 Red Hat Security Advisory: java-1.7.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:2086 Red Hat Security Advisory: java-1.6.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:1927 Red Hat Security Advisory: java-1.7.0-oracle security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:1928 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:1926 Red Hat Security Advisory: java-1.8.0-oracle security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:1920 Red Hat Security Advisory: java-1.7.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:1921 Red Hat Security Advisory: java-1.7.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:1919 Red Hat Security Advisory: java-1.8.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- DSA-3381-1 openjdk-7 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3465-1 openjdk-6 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-346-1 openjdk-6 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- USN-2784-1 openjdk-7 vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- SUSE-SU-2015:2268-1 Security update for java-1_8_0-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:1875-1 Security update for java-1_7_0-openjdk SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:2182-1 Security update for java-1_7_1-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:1874-2 Security update for java-1_7_0-openjdk SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:1874-1 Security update for java-1_7_0-openjdk SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:2192-1 Security update for java-1_6_0-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:2168-2 Security update for java-1_7_1-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10534-1 java-1_7_0-openjdk-1.7.0.121-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:2166-1 Security update for java-1_6_0-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:1875-2 Security update for java-1_7_0-openjdk SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:2216-1 Security update for java-1_7_0-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:2168-1 Security update for java-1_7_1-ibm SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10197-1 java-1_8_0-openjdk-1.8.0.111-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- ELSA-2015-2086 Important: java-1.6.0-openjdk security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Nov 18, 2015
- ELSA-2015-1920 Critical: java-1.7.0-openjdk security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Oct 21, 2015
- ELSA-2015-1919 Important: java-1.8.0-openjdk security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Oct 21, 2015
References
- SUSE-SU-2015:2182 vendor-advisory
- USN-2784-1 vendor-advisory
- openSUSE-SU-2015:1905 vendor-advisory
- SUSE-SU-2015:2192 vendor-advisory
- 77200 vdb-entry
- openSUSE-SU-2015:1906 vendor-advisory
- RHSA-2015:2507 vendor-advisory
- RHSA-2015:1928 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
- RHSA-2016:1430 vendor-advisory
- RHSA-2015:2506 vendor-advisory
- RHSA-2015:2509 vendor-advisory
- 1033884 vdb-entry
- SUSE-SU-2015:2166 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- openSUSE-SU-2016:0270 vendor-advisory
- RHSA-2015:1919 vendor-advisory
- GLSA-201603-11 vendor-advisory
- openSUSE-SU-2015:1902 vendor-advisory
- RHSA-2015:1920 vendor-advisory
- GLSA-201603-14 vendor-advisory
- SUSE-SU-2015:2216 vendor-advisory
- RHSA-2015:1927 vendor-advisory
- openSUSE-SU-2015:1971 vendor-advisory
- SUSE-SU-2015:2268 vendor-advisory
- SUSE-SU-2015:2168 vendor-advisory
- RHSA-2015:1921 vendor-advisory
- SUSE-SU-2015:1874 vendor-advisory
- DSA-3381 vendor-advisory
- RHSA-2015:1926 vendor-advisory
- SUSE-SU-2015:1875 vendor-advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10141
- RHSA-2015:2508 vendor-advisory
- SUSE-SU-2016:0113 vendor-advisory
- USN-2827-1 vendor-advisory