Advisories » MGASA-2018-0298

Updated java-1.8.0-openjdk packages fix security vulnerability

Publication date: 01 Jul 2018
Modification date: 01 Jul 2018
Type: security
Affected Mageia releases : 6
CVE: CVE-2018-3639

Description

Systems with microprocessors utilizing speculative execution and speculative
execution of memory reads before the addresses of all prior memory writes
are known may allow unauthorized disclosure of information to an attacker
with local user access via a side-channel analysis, aka Speculative Store
Bypass (SSB), Variant 4. (CVE-2018-3639)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=23071
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3639

SRPMS

6/core

• java-1.8.0-openjdk-1.8.0.172-1.b11.1.mga6
• copy-jdk-configs-3.7-1.mga6