Debian-LTS alert DLA-451-1 (openjdk-7)

From:
    	     
 
Markus Koschany <apo@debian.org> 
To:
    	     
 
debian-lts-announce@lists.debian.org 
Subject:
    	     
 
[SECURITY] [DLA 451-1] openjdk-7 security update 
Date:
    	     
 
Tue, 3 May 2016 12:37:41 +0200
Message-ID:
    	     
 
<57287F75.3050308@debian.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Package        : openjdk-7
Version        : 7u101-2.6.6-2~deb7u1
CVE ID         : CVE-2016-0636 CVE-2016-0686 CVE-2016-0687
		 CVE-2016-0695 CVE-2016-3425 CVE-2016-3426 CVE-2016-3427

Several vulnerabilities have been discovered in OpenJDK, an
implementation of the Oracle Java platform, resulting in breakouts of
the Java sandbox, denial of service or information disclosure.

For Debian 7 "Wheezy", these problems have been fixed in version
7u101-2.6.6-2~deb7u1.

We recommend that you upgrade your openjdk-7 packages.

Please note that OpenJDK 7 will be made the new default Java
implementation on 26 June 2016. For further information please refer to

	https://wiki.debian.org/LTS/Wheezy
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQJ8BAEBCgBmBQJXKH90XxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRBQ0YzRDA4OEVGMzJFREVGNkExQTgzNUZE
OUFEMTRCOTUxM0I1MUU0AAoJENmtFLlRO1HkW0QP/2ZDU/KHdGSBGMuQcObKyC4L
5bBBT/9qBIJbeHmcl0UUm4mTFdKyvnK2JVJzmmIV+2HLd3kULFQ0Quq0cyG47WTO
WiByd/ylGkNJNjY/IjG/5JR6TOR28BA0qrIvLVUgJpeKV2pxy/6KYcEGas9wtZvF
95d99Kro8CTrjsw05pe1HzhGfYfdmNXyFcrr8uVOT9Io8Okvpbb3bCWExRoALlAt
AtBRgjIHtyW5Z6GNuWA1IqyXyiDuhWrs0XIU7qSUBi3+Y7hbBostxdBb7aCVCbEK
whr0Yq9TulH1d95O0L1O1UlE9Lm81FHX/LRALwGdvpuMAknyMEAY86JlKa6ce83O
NeAEqlBxHNdNXhkwSwMicr1uLo20QRjfeCvEEBYGIIesZshiqfdNrG0dfpPDIASu
E8EZdEtW768UbbTdJpL+plvqT507pOcp7BAy+NAWn1Zd6hUGAMQPe0BtbXdyHuou
zwz5kGiJAtOFdiB4d020uVkymdu4xVyhKC0YzC30qo/5RqkaSSED4AjteXYkVFzC
JkWbYD5r1sZ4yx7DV/aNswxbYmxFasxZ3I9j/J7fs3mcjJYyOdaitxXQkOJgkuy4
U8cfq3XhwYKLodFiDksapD95o4m9Y/qD30Gl7LBZ35v3EaGnoIZxS3TH37E6wDmS
xFpqCAXzXipxJ0wJR3f4
=KzbX
-----END PGP SIGNATURE-----