Skip to content
OpenAdvisories
Unscored CVE-2016-0687 EUVD-2016-0722GHSA-xvgm-5834-vp34

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiali…

Published Apr 21, 2016 · Updated Oct 15, 2024 · Assigned by oracle

Package: openjdk-6 Package: openjdk-7 Package: openjdk-8 Ecosystem: Ubuntu

Description

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the Hotspot sub-component.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 8 openjdk-7 7u101-2.6.6-1~deb8u1 DSA-3558-1
Debian 7 openjdk-7 7u101-2.6.6-2~deb7u1 DLA-451-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS openjdk-8 8u91-b14-0ubuntu4~16.04.1 USN-2963-1
Ubuntu 14.04 LTS openjdk-6 6b39-1.13.11-0ubuntu0.14.04.1 —
Ubuntu 14.04 LTS openjdk-7 7u101-2.6.6-0ubuntu0.14.04.1 USN-2964-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 7 java-1.6.0-openjdk +4 1:1.6.0.39-1.13.11.0.el7_2 RHSA-2016:0723
RHEL 7 java-1.7.0-openjdk +6 1:1.7.0.101-2.6.6.1.el7_2 RHSA-2016:0676
RHEL 7 java-1.7.1-ibm +5 1:1.7.1.3.40-1jpp.1.el7 RHSA-2016:0701
RHEL 7 java-1.8.0-ibm +5 1:1.8.0.3.0-1jpp.1.el7 RHSA-2016:0716
RHEL 7 java-1.8.0-openjdk +13 1:1.8.0.91-0.b14.el7_2 RHSA-2016:0650
RHEL 6 java-1.6.0-ibm +6 1:1.6.0.16.25-1jpp.1.el6_7 RHSA-2016:0708
RHEL 6 java-1.6.0-openjdk +4 1:1.6.0.39-1.13.11.0.el6_7 RHSA-2016:0723
RHEL 6 java-1.7.0-openjdk +4 1:1.7.0.101-2.6.6.1.el6_7 RHSA-2016:0675
RHEL 6 java-1.7.1-ibm +5 1:1.7.1.3.40-1jpp.1.el6_7 RHSA-2016:0701
RHEL 6 java-1.8.0-ibm +5 1:1.8.0.3.0-1jpp.1.el6 RHSA-2016:1039
RHEL 6 java-1.8.0-openjdk +11 1:1.8.0.91-0.b14.el6_7 RHSA-2016:0651
RHEL 5 java-1.6.0-ibm +7 1:1.6.0.16.25-1jpp.1.el5 RHSA-2016:0708
RHEL 5 java-1.6.0-openjdk +4 1:1.6.0.39-1.13.11.0.el5_11 RHSA-2016:0723
RHEL 5 java-1.7.0-ibm +5 1:1.7.0.9.40-1jpp.1.el5 RHSA-2016:0702
RHEL 5 java-1.7.0-openjdk +4 1:1.7.0.101-2.6.6.1.el5_11 RHSA-2016:0676
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhel Extras Oracle Java 7 java-1.6.0-sun +5 1:1.6.0.115-1jpp.1.el7 RHSA-2016:0679
Red Hat Rhel Extras Oracle Java 7 java-1.7.0-oracle +5 1:1.7.0.101-1jpp.1.el7 RHSA-2016:0678
Red Hat Rhel Extras Oracle Java 7 java-1.8.0-oracle +5 1:1.8.0.91-1jpp.1.el7 RHSA-2016:0677
Red Hat Rhel Extras Oracle Java 6 java-1.6.0-sun +5 1:1.6.0.115-1jpp.1.el6_7 RHSA-2016:0679
Red Hat Rhel Extras Oracle Java 6 java-1.7.0-oracle +5 1:1.7.0.101-1jpp.1.el6_7 RHSA-2016:0678
Red Hat Rhel Extras Oracle Java 6 java-1.8.0-oracle +5 1:1.8.0.91-1jpp.1.el6_7 RHSA-2016:0677
Red Hat Rhel Extras Oracle Java 5 java-1.6.0-sun +5 1:1.6.0.115-1jpp.1.el5_11 RHSA-2016:0679
Red Hat Rhel Extras Oracle Java 5 java-1.7.0-oracle +5 1:1.7.0.101-1jpp.1.el5_11 RHSA-2016:0678
Red Hat Network Satellite 5 java-1.7.0-ibm +1 1:1.7.0.9.40-1jpp.1.el5 RHSA-2016:1430
Red Hat Network Satellite 5 java-1.7.1-ibm +1 1:1.7.1.3.40-1jpp.1.el6_7 RHSA-2017:1216, RHSA-2016:1430
Red Hat Network Satellite 5 spacewalk-java +5 2.0.2-109.el5sat RHSA-2016:1430

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 12 SP1 java-1_7_0-openjdk 1.7.0.101-30.1 SUSE-SU-2016:1250-1
SLES 12 SP1 java-1_7_1-ibm 1.7.1_sr3.40-25.1 SUSE-SU-2016:1299-1
SLES 12 SP1 java-1_8_0-ibm 1.8.0_sr3.0-10.1 SUSE-SU-2016:1475-1
SLES 12 SP1 java-1_8_0-openjdk 1.8.0.91-11.1 SUSE-SU-2016:1248-1
SLES 12 java-1_6_0-ibm 1.6.0_sr16.25-34.1 SUSE-SU-2016:1458-1, SUSE-SU-2016:1303-1
SLES 12 java-1_7_0-openjdk 1.7.0.101-30.1 SUSE-SU-2016:1250-1
SLES 12 java-1_7_1-ibm 1.7.1_sr3.40-25.1 SUSE-SU-2016:1299-1
SLES 11 SP4 java-1_7_1-ibm 1.7.1_sr3.40-13.1 SUSE-SU-2016:1300-1
SLES 11 SP3 java-1_6_0-ibm 1.6.0_sr16.25-69.1 SUSE-SU-2016:1379-1
SLES 11 SP3 java-1_7_0-ibm 1.7.0_sr9.40-52.1 SUSE-SU-2016:1378-1
SLES 11 SP2 java-1_6_0-ibm 1.6.0_sr16.25-69.1 SUSE-SU-2016:1379-1
SLES 11 SP2 java-1_7_0-ibm 1.7.0_sr9.40-52.1 SUSE-SU-2016:1378-1
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 12 SP1 java-1_7_0-openjdk 1.7.0.101-30.1 SUSE-SU-2016:1250-1
SLES for SAP 12 SP1 java-1_7_1-ibm 1.7.1_sr3.40-25.1 SUSE-SU-2016:1299-1
SLES for SAP 12 SP1 java-1_8_0-ibm 1.8.0_sr3.0-10.1 SUSE-SU-2016:1475-1
SLES for SAP 12 SP1 java-1_8_0-openjdk 1.8.0.91-11.1 SUSE-SU-2016:1248-1
SLES for SAP 12 java-1_7_0-openjdk 1.7.0.101-30.1 SUSE-SU-2016:1250-1
SLES for SAP 12 java-1_7_1-ibm 1.7.1_sr3.40-25.1 SUSE-SU-2016:1299-1
SLES for SAP 11 SP4 java-1_7_1-ibm 1.7.1_sr3.40-13.1 SUSE-SU-2016:1300-1
SUSE OpenStack Cloud 5 java-1_6_0-ibm 1.6.0_sr16.25-69.1 SUSE-SU-2016:1379-1
SUSE OpenStack Cloud 5 java-1_7_0-ibm 1.7.0_sr9.40-52.1 SUSE-SU-2016:1378-1
SUSE Manager Proxy 2.1 java-1_6_0-ibm 1.6.0_sr16.25-69.1 SUSE-SU-2016:1379-1
SUSE Manager Proxy 2.1 java-1_7_0-ibm 1.7.0_sr9.40-52.1 SUSE-SU-2016:1378-1
SUSE Manager 2.1 java-1_6_0-ibm 1.6.0_sr16.25-69.1 SUSE-SU-2016:1379-1
SUSE Manager 2.1 java-1_7_0-ibm 1.7.0_sr9.40-52.1 SUSE-SU-2016:1378-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed java-1_7_0-openjdk 1.7.0.121-1.1 openSUSE-SU-2024:10534-1
openSUSE Tumbleweed java-1_8_0-openjdk 1.8.0.111-1.1 openSUSE-SU-2024:10197-1

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 7 java-1.6.0-openjdk +4 1:1.6.0.39-1.13.11.0.0.1.el5_11 ELSA-2016-0723
Oracle Linux 7 java-1.7.0-openjdk +6 1:1.7.0.101-2.6.6.1.0.1.el7_2 ELSA-2016-0676
Oracle Linux 7 java-1.8.0-openjdk +13 1:1.8.0.91-0.b14.el7_2 ELSA-2016-0650

Advisories 34

References