Advisories ยป MGASA-2016-0273

Updated java-1.8.0-openjdk packages fix security vulnerability

Publication date: 03 Aug 2016
Modification date: 03 Aug 2016
Type: security
Affected Mageia releases : 5
CVE: CVE-2016-3458 , CVE-2016-3500 , CVE-2016-3508 , CVE-2016-3550 , CVE-2016-3587 , CVE-2016-3598 , CVE-2016-3606 , CVE-2016-3610

Description

Multiple flaws were discovered in the Hotspot and Libraries components in
OpenJDK. An untrusted Java application or applet could use these flaws to
completely bypass Java sandbox restrictions (CVE-2016-3606, CVE-2016-3587,
CVE-2016-3598, CVE-2016-3610).

Multiple denial of service flaws were found in the JAXP component in
OpenJDK. A specially crafted XML file could cause a Java application using
JAXP to consume an excessive amount of CPU and memory when parsed
(CVE-2016-3500, CVE-2016-3508).

Multiple flaws were found in the CORBA and Hotsport components in OpenJDK.
An untrusted Java application or applet could use these flaws to bypass
certain Java sandbox restrictions (CVE-2016-3458, CVE-2016-3550).

References

SRPMS

5/core