| |||||||||||||||||||
Mageia alert MGASA-2013-0088 (java-1.7.0-openjdk)
MGASA-2013-0088 Date: March 9rd, 2013 Affected releases: 2 Media: Core Description: Updated java-1.7.0-openjdk packages fix security vulnerabilities: An integer overflow flaw was found in the way the 2D component handled certain sample model instances. A specially-crafted sample model instance could cause Java Virtual Machine memory corruption and, possibly, lead to arbitrary code execution with virtual machine privileges (CVE-2013-0809). It was discovered that the 2D component did not properly reject certain malformed images. Specially-crafted raster parameters could cause Java Virtual Machine memory corruption and, possibly, lead to arbitrary code execution with virtual machine privileges (CVE-2013-1493). Updated Packages: i586: java-1.7.0-openjdk-javadoc-1.7.0.6-2.3.8.1.mga2.noarch java-1.7.0-openjdk-demo-1.7.0.6-2.3.8.1.mga2.i586 java-1.7.0-openjdk-1.7.0.6-2.3.8.1.mga2.i586 java-1.7.0-openjdk-devel-1.7.0.6-2.3.8.1.mga2.i586 java-1.7.0-openjdk-src-1.7.0.6-2.3.8.1.mga2.i586 x86_64: java-1.7.0-openjdk-src-1.7.0.6-2.3.8.1.mga2.x86_64 java-1.7.0-openjdk-1.7.0.6-2.3.8.1.mga2.x86_64 java-1.7.0-openjdk-javadoc-1.7.0.6-2.3.8.1.mga2.noarch java-1.7.0-openjdk-devel-1.7.0.6-2.3.8.1.mga2.x86_64 java-1.7.0-openjdk-demo-1.7.0.6-2.3.8.1.mga2.x86_64 SRPMS: java-1.7.0-openjdk-1.7.0.6-2.3.8.1.mga2 References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0809 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1493 http://www.oracle.com/technetwork/topics/security/alert-c... https://rhn.redhat.com/errata/RHSA-2013-0602.html https://bugs.mageia.org/show_bug.cgi?id=9264 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-... (Log in to post comments)
|
|||||||||||||||||||