Risks
Advisories
Browse
or
or
Ubuntu Security Notice - openjdk-7 vulnerabilities (USN-1806-1)
==========================================================================
Ubuntu Security Notice USN-1806-1
April 23, 2013

openjdk-7 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.10

Summary:

Several security issues were fixed in OpenJDK 7.

Software Description:
- openjdk-7: Open Source Java implementation

Details:

Ben Murphy discovered a vulnerability in the OpenJDK JRE related to
information disclosure and data integrity. An attacker could exploit this
to execute arbitrary code. (CVE-2013-0401)

James Forshaw discovered a vulnerability in the OpenJDK JRE related to
information disclosure, data integrity and availability. An attacker could
exploit this to execute arbitrary code. (CVE-2013-1488)

Several vulnerabilities were discovered in the OpenJDK JRE related to
information disclosure, data integrity and availability. An attacker could
exploit these to cause a denial of service or expose sensitive data over
the network. (CVE-2013-1518, CVE-2013-1537, CVE-2013-1557, CVE-2013-1569,
CVE-2013-2383, CVE-2013-2384, CVE-2013-2420, CVE-2013-2421, CVE-2013-2422,
CVE-2013-2426, CVE-2013-2429, CVE-2013-2430, CVE-2013-2431, CVE-2013-2436)

Two vulnerabilities were discovered in the OpenJDK JRE related to
confidentiality. An attacker could exploit these to expose sensitive data
over the network. (CVE-2013-2415, CVE-2013-2424)

Two vulnerabilities were discovered in the OpenJDK JRE related to
availability. An attacker could exploit these to cause a denial of service.
(CVE-2013-2417, CVE-2013-2419)

A vulnerability was discovered in the OpenJDK JRE related to data
integrity. (CVE-2013-2423)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.10:
  icedtea-7-jre-jamvm             7u21-2.3.9-0ubuntu0.12.10.1
  openjdk-7-jre                   7u21-2.3.9-0ubuntu0.12.10.1
  openjdk-7-jre-headless          7u21-2.3.9-0ubuntu0.12.10.1
  openjdk-7-jre-lib               7u21-2.3.9-0ubuntu0.12.10.1
  openjdk-7-jre-zero              7u21-2.3.9-0ubuntu0.12.10.1

This update uses a new upstream release, which includes additional bug
fixes. After a standard system update you need to restart any Java
applications or applets to make all the necessary changes.

References:
  http://www.ubuntu.com/usn/usn-1806-1
  CVE-2013-0401, CVE-2013-1488, CVE-2013-1518, CVE-2013-1537,
  CVE-2013-1557, CVE-2013-1558, CVE-2013-1569, CVE-2013-2383,
  CVE-2013-2384, CVE-2013-2415, CVE-2013-2417, CVE-2013-2419,
  CVE-2013-2420, CVE-2013-2421, CVE-2013-2422, CVE-2013-2423,
  CVE-2013-2424, CVE-2013-2426, CVE-2013-2429, CVE-2013-2430,
  CVE-2013-2431, CVE-2013-2436

Package Information:
  https://launchpad.net/ubuntu/+source/openjdk-7/7u21-2.3.9-0ubuntu0.12.10.1




Spotlight

(IN)SECURE Magazine issue 43 released!

Posted on 16 September 2014.  |  (IN)SECURE Magazine is a free digital security publication discussing some of the hottest information security topics. This issue covers web application security, mobile hacking, certification, Black Hat, and much more.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Wed, Sep 17th
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //