| |||||||||||||||||||
Mageia alert MGASA-2013-0089 (java-1.6.0-openjdk)
MGASA-2013-0089 Date: March 9rd, 2013 Affected releases: 2 Media: Core Description: Updated java-1.6.0-openjdk packages fix security vulnerabilities: An integer overflow flaw was found in the way the 2D component handled certain sample model instances. A specially-crafted sample model instance could cause Java Virtual Machine memory corruption and, possibly, lead to arbitrary code execution with virtual machine privileges (CVE-2013-0809). It was discovered that the 2D component did not properly reject certain malformed images. Specially-crafted raster parameters could cause Java Virtual Machine memory corruption and, possibly, lead to arbitrary code execution with virtual machine privileges (CVE-2013-1493). Updated Packages: i586: java-1.6.0-openjdk-javadoc-1.6.0.0-39.b24.1.mga2.noarch java-1.6.0-openjdk-devel-1.6.0.0-39.b24.1.mga2.i586 java-1.6.0-openjdk-demo-1.6.0.0-39.b24.1.mga2.i586 java-1.6.0-openjdk-1.6.0.0-39.b24.1.mga2.i586 java-1.6.0-openjdk-src-1.6.0.0-39.b24.1.mga2.noarch x86_64: java-1.6.0-openjdk-devel-1.6.0.0-39.b24.1.mga2.x86_64 java-1.6.0-openjdk-javadoc-1.6.0.0-39.b24.1.mga2.noarch java-1.6.0-openjdk-1.6.0.0-39.b24.1.mga2.x86_64 java-1.6.0-openjdk-demo-1.6.0.0-39.b24.1.mga2.x86_64 java-1.6.0-openjdk-src-1.6.0.0-39.b24.1.mga2.noarch SRPMS: java-1.6.0-openjdk-1.6.0.0-39.b24.1.mga2 References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0809 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1493 http://mail.openjdk.java.net/pipermail/distro-pkg-dev/201... http://www.oracle.com/technetwork/topics/security/alert-c... https://rhn.redhat.com/errata/RHSA-2013-0605.html https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-... https://bugs.mageia.org/show_bug.cgi?id=9256 (Log in to post comments)
|
|||||||||||||||||||