The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a heap-based buffer overflow in the readImage function, which allows remote attackers to execute arbitrary code via crafted image data.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3 Java_jan2016_advisory | — | — | Aug 5, 2016 | Jan 20, 2016 |
| Aix 6.1 Java_jan2016_advisory | — | — | Aug 5, 2016 | Jan 20, 2016 |
| Aix 7.1 Java_jan2016_advisory | — | — | Aug 5, 2016 | Jan 20, 2016 |
| Aix 7.2 Java_jan2016_advisory | — | — | Aug 5, 2016 | Jan 20, 2016 |
| Azul Zulu | — | Apply legacy security update: Azul Zulu JDK 6 installer 6.11 (JDK 6u77, quarterly CPU) — Azul Legacy Production SupportUpgrade to Azul Zulu JDK 8 installer 8.12 (JDK 8u71, quarterly CPU) (LTS stream)Apply legacy security update: Azul Zulu JDK 7 installer 7.13 (JDK 7u95, quarterly CPU) — Azul Legacy Production Support | Jan 21, 2016 | Jan 21, 2016 |
| Centos_linux | — | Upgrade java-1.8.0-openjdk-src-debugUpgrade java-1.8.0-openjdk-develUpgrade java-1.7.0-openjdk-srcUpgrade java-1.8.0-openjdk-srcUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.6.0-openjdkUpgrade java-1.8.0-openjdkUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-headless-debugUpgrade java-1.7.0-openjdk-demoUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-javadoc-debugUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.7.0-openjdk-develUpgrade java-1.8.0-openjdk-devel-debugUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.6.0-openjdk-srcUpgrade java-1.8.0-openjdk-demo-debugUpgrade java-1.8.0-openjdk-debugUpgrade java-1.6.0-openjdk-demoUpgrade java-1.8.0-openjdk-accessibility-debugUpgrade java-1.6.0-openjdk-develUpgrade java-1.7.0-openjdkUpgrade java-1.8.0-openjdk-demo | Jul 6, 2016 | Jan 20, 2016 |
| Debian | — | Upgrade openjdk-6Upgrade openjdk-7Upgrade openjdk-8 | Feb 2, 2016 | Jan 20, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 5, 2016 |
| Gentoo Linux | — | Upgrade dev-java/oracle-jre-bin.Upgrade dev-java/icedtea-bin.Upgrade dev-java/icedtea.Upgrade dev-java/oracle-jdk-bin. | Oct 30, 2017 | Jan 20, 2016 |
| Ibm Aix | — | Apply the fix or workaround for java_jan2016_advisory | Nov 30, 2017 | Jan 20, 2016 |
| Ibm Java | — | Upgrade IBM Java to version 6.1.8.20Upgrade IBM Java to version 6.0.16.20Upgrade IBM Java to version 7.0.9.30Upgrade IBM Java to version 7.1.3.30Upgrade IBM Java to version 8.0.2.10 | Oct 20, 2026 | Oct 20, 2026 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Jan 19, 2016 | Jan 19, 2016 |
| Oracle_linux | — | Upgrade java-1.6.0-openjdkUpgrade java-1.7.0-openjdkUpgrade java-1.8.0-openjdk-debugUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-accessibility-debugUpgrade java-1.7.0-openjdk-srcUpgrade java-1.8.0-openjdk-demo-debugUpgrade java-1.7.0-openjdk-demoUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.7.0-openjdk-develUpgrade java-1.8.0-openjdk-headless-debugUpgrade java-1.8.0-openjdk-src-debugUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdkUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.8.0-openjdk-demoUpgrade java-1.6.0-openjdk-demoUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.8.0-openjdk-devel-debugUpgrade java-1.6.0-openjdk-develUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-javadoc-debugUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.6.0-openjdk-src | Oct 16, 2024 | Jan 21, 2016 |
| Suse | — | Upgrade java-1_6_0-ibm-pluginUpgrade java-1_7_0-ibm-pluginUpgrade java-1_7_1-ibm-develUpgrade java-1_7_1-ibm-pluginUpgrade java-1_7_0-ibm-alsaUpgrade java-1_8_0-openjdk-headlessUpgrade java-1_7_0-openjdkUpgrade java-1_7_0-ibmUpgrade java-1_7_0-openjdk-develUpgrade java-1_8_0-ibmUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_7_0-ibm-develUpgrade java-1_7_0-openjdk-demoUpgrade java-1_6_0-ibm-fontsUpgrade java-1_8_0-ibm-develUpgrade java-1_8_0-ibm-alsaUpgrade java-1_8_0-openjdk-develUpgrade java-1_6_0-ibm-alsaUpgrade java-1_8_0-ibm-pluginUpgrade java-1_8_0-openjdk-demoUpgrade java-1_7_1-ibm-alsaUpgrade java-1_6_0-ibmUpgrade java-1_7_0-ibm-jdbcUpgrade java-1_8_0-openjdkUpgrade java-1_7_1-ibmUpgrade java-1_6_0-ibm-develUpgrade java-1_7_0-openjdk-headless | Feb 2, 2016 | Jan 20, 2016 |
| Ubuntu | — | Upgrade icedtea-6-jre-cacaoUpgrade icedtea-6-jre-jamvmUpgrade openjdk-7-jreUpgrade openjdk-6-jreUpgrade openjdk-6-jre-headlessUpgrade openjdk-7-jre-libUpgrade icedtea-7-jre-jamvmUpgrade openjdk-7-jre-headlessUpgrade openjdk-6-jre-libUpgrade openjdk-6-jre-zeroUpgrade openjdk-7-jre-zero | Feb 2, 2016 | Jan 20, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub