bugtraq - [SECURITY] [DSA 3144-1] openjdk-7 security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: Thu, 29 Jan 2015 22:57:25 +0100
From: Moritz Muehlenhoff <jmm@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 3144-1] openjdk-7 security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3144-1                   security@...ian.org
http://www.debian.org/security/                        Moritz Muehlenhoff
January 29, 2015                       http://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : openjdk-7
CVE ID         : CVE-2014-3566 CVE-2014-6585 CVE-2014-6587 CVE-2014-6591 
                 CVE-2014-6593 CVE-2014-6601 CVE-2015-0383 CVE-2015-0395
                 CVE-2015-0407 CVE-2015-0408 CVE-2015-0410 CVE-2015-0412

Several vulnerabilities have been discovered in OpenJDK, an
implementation of the Oracle Java platform, resulting in the execution
of arbitrary code, information disclosure or denial of service.

For the stable distribution (wheezy), these problems have been fixed in
version 7u75-2.5.4-1~deb7u1.

For the upcoming stable distribution (jessie), these problems will be
fixed soon.

For the unstable distribution (sid), these problems have been fixed in
version 7u75-2.5.4-1.

We recommend that you upgrade your openjdk-7 packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=ollA
-----END PGP SIGNATURE-----