Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Debian: DSA-2987-1 Critical Update for OpenJDK DoS and Code Issue

debian
Calendar Grey July 23, 2014
Scroller Debian
Debian DSA-3105-2 upgrades OpenJDK to address several vulnerabilities such as remote code execution and denial of service risks.
Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox,...

Summary

Several vulnerabilities have been discovered in OpenJDK, an
implementation of the Oracle Java platform, resulting in the execution of
arbitrary code, breakouts of the Java sandbox, information disclosure or
denial of service.

For the stable distribution (wheezy), these problems have been fixed in
version 7u65-2.5.1-2~deb7u1.

For the unstable distribution (sid), these problems have been fixed in
version 7u65-2.5.1-1.

We recommend that you upgrade your openjdk-7 packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: openjdk-7
CVE ID: CVE-2014-2483 CVE-2014-2490 CVE-2014-4209 CVE-2014-4216

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.