From Mageia wiki
Revision as of 01:15, 9 March 2013 by Dmorgan (talk | contribs) (MGASA-2013-0088)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

MGASA-2013-0088

Date: March 9rd, 2013
Affected releases: 2
Media: Core


Description:
Updated java-1.7.0-openjdk packages fix security vulnerabilities:

An integer overflow flaw was found in the way the 2D component handled
certain sample model instances. A specially-crafted sample model instance
could cause Java Virtual Machine memory corruption and, possibly, lead to
arbitrary code execution with virtual machine privileges (CVE-2013-0809).

It was discovered that the 2D component did not properly reject certain
malformed images. Specially-crafted raster parameters could cause Java
Virtual Machine memory corruption and, possibly, lead to arbitrary code
execution with virtual machine privileges (CVE-2013-1493).

Updated Packages:
i586:
java-1.7.0-openjdk-javadoc-1.7.0.6-2.3.8.1.mga2.noarch
java-1.7.0-openjdk-demo-1.7.0.6-2.3.8.1.mga2.i586
java-1.7.0-openjdk-1.7.0.6-2.3.8.1.mga2.i586
java-1.7.0-openjdk-devel-1.7.0.6-2.3.8.1.mga2.i586
java-1.7.0-openjdk-src-1.7.0.6-2.3.8.1.mga2.i586


x86_64:
java-1.7.0-openjdk-src-1.7.0.6-2.3.8.1.mga2.x86_64
java-1.7.0-openjdk-1.7.0.6-2.3.8.1.mga2.x86_64
java-1.7.0-openjdk-javadoc-1.7.0.6-2.3.8.1.mga2.noarch
java-1.7.0-openjdk-devel-1.7.0.6-2.3.8.1.mga2.x86_64
java-1.7.0-openjdk-demo-1.7.0.6-2.3.8.1.mga2.x86_64

SRPMS:
java-1.7.0-openjdk-1.7.0.6-2.3.8.1.mga2


References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0809
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1493
http://www.oracle.com/technetwork/topics/security/alert-cve-2013-1493-1915081.html
https://rhn.redhat.com/errata/RHSA-2013-0602.html
https://bugs.mageia.org/show_bug.cgi?id=9264