bugtraq - [SECURITY] [DSA 4453-1] openjdk-8 security update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Wed, 29 May 2019 21:15:56 +0000
From: Moritz Muehlenhoff <jmm@...ian.org>
To: bugtraq@...urityfocus.com
Subject: [SECURITY] [DSA 4453-1] openjdk-8 security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4453-1                   security@...ian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
May 29, 2019                          https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : openjdk-8
CVE ID         : CVE-2019-2602 CVE-2019-2684 CVE-2019-2698

Several vulnerabilities have been discovered in OpenJDK, an
implementation of the Oracle Java platform, resulting in denial of
service or sandbox bypass.

For the stable distribution (stretch), these problems have been fixed in
version 8u212-b03-2~deb9u1.

We recommend that you upgrade your openjdk-8 packages.

For the detailed security status of openjdk-8 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/openjdk-8

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@...ts.debian.org
-----BEGIN PGP SIGNATURE-----
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=bf//
-----END PGP SIGNATURE-----