bugtraq - [SECURITY] [DSA 4185-1] openjdk-8 security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sat, 28 Apr 2018 22:33:57 +0200
From: Moritz Muehlenhoff <jmm@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 4185-1] openjdk-8 security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4185-1                   security@...ian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
April 28, 2018                        https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : openjdk-8
CVE ID         : CVE-2018-2790 CVE-2018-2794 CVE-2018-2795 CVE-2018-2796
                 CVE-2018-2797 CVE-2018-2798 CVE-2018-2799 CVE-2018-2800
		 CVE-2018-2814 CVE-2018-2815

Several vulnerabilities have been discovered in OpenJDK, an
implementation of the Oracle Java platform, resulting in denial of
service, sandbox bypass, execution of arbitrary code or bypass of JAR
signature validation.

For the stable distribution (stretch), these problems have been fixed in
version 8u171-b11-1~deb9u1.

We recommend that you upgrade your openjdk-8 packages.

For the detailed security status of openjdk-8 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/openjdk-8

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----
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=j0FZ
-----END PGP SIGNATURE-----