MGASA-2013-0089
| Date: | March 9rd, 2013 |
| Affected releases: | 2 |
| Media: | Core |
Description:
Updated java-1.6.0-openjdk packages fix security vulnerabilities:
An integer overflow flaw was found in the way the 2D component handled
certain sample model instances. A specially-crafted sample model instance
could cause Java Virtual Machine memory corruption and, possibly, lead to
arbitrary code execution with virtual machine privileges (CVE-2013-0809).
It was discovered that the 2D component did not properly reject certain
malformed images. Specially-crafted raster parameters could cause Java
Virtual Machine memory corruption and, possibly, lead to arbitrary code
execution with virtual machine privileges (CVE-2013-1493).
Updated Packages:
i586:
java-1.6.0-openjdk-javadoc-1.6.0.0-39.b24.1.mga2.noarch
java-1.6.0-openjdk-devel-1.6.0.0-39.b24.1.mga2.i586
java-1.6.0-openjdk-demo-1.6.0.0-39.b24.1.mga2.i586
java-1.6.0-openjdk-1.6.0.0-39.b24.1.mga2.i586
java-1.6.0-openjdk-src-1.6.0.0-39.b24.1.mga2.noarch
x86_64:
java-1.6.0-openjdk-devel-1.6.0.0-39.b24.1.mga2.x86_64
java-1.6.0-openjdk-javadoc-1.6.0.0-39.b24.1.mga2.noarch
java-1.6.0-openjdk-1.6.0.0-39.b24.1.mga2.x86_64
java-1.6.0-openjdk-demo-1.6.0.0-39.b24.1.mga2.x86_64
java-1.6.0-openjdk-src-1.6.0.0-39.b24.1.mga2.noarch
SRPMS:
java-1.6.0-openjdk-1.6.0.0-39.b24.1.mga2
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0809
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1493
http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-March/022145.html
http://www.oracle.com/technetwork/topics/security/alert-cve-2013-1493-1915081.html
https://rhn.redhat.com/errata/RHSA-2013-0605.html
https://bugs.mageia.org/show_bug.cgi?id=9256
