java-1.6.0-openjdk: mysterious vulnerabilities

Package(s):

java-1.6.0-openjdk

CVE #(s):

CVE-2011-0822 CVE-2011-0870

Created:

June 15, 2011

Updated:

June 28, 2011

Description:

The java-1.6.0-openjdk packages suffers from vulnerabilities described as "integer overflows in 2D code" (CVE-2011-0822) and "vulnerability in SAAJ" (CVE-2011-0870).

Alerts:

Gentoo	201406-32	icedtea-bin	2014-06-29
openSUSE	openSUSE-SU-2011:0706-1	java-1_6_0-openjdk	2011-06-28
Ubuntu	USN-1154-1	openjdk-6, openjdk-6b18	2011-06-17
Fedora	FEDORA-2011-8028	java-1.6.0-openjdk	2011-06-08
Fedora	FEDORA-2011-8020	java-1.6.0-openjdk	2011-06-08

java-1.6.0-openjdk: mysterious vulnerabilities

Posted Jun 16, 2011 6:14 UTC (Thu) by geofft (subscriber, #59789) [Link] (1 responses)

There are a half-dozen other vulnerabilities in the linked Fedora changelog; why are only these two mentioned here?

java-1.6.0-openjdk: mysterious vulnerabilities

Posted Jun 16, 2011 12:25 UTC (Thu) by corbet (editor, #1) [Link]

Because this alert is linked to a couple of other vulnerabilities too: 1, 2.