Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Mageia: 2019-0155 Moderate: OpenJDK Security Issues Resolved

mageia
Calendar Grey May 7, 2019
Dist Mageia Esm H88
The latest updates to the java-1.8.0-openjdk packages address numerous security vulnerabilities and fix existing bugs. Check the release notes for detailed information on the fixes
The updated packages fix several bugs and some security issues: Font layout engine out of bounds access setCurrGlyphID()

Summary

The updated packages fix several bugs and some security issues:
Font layout engine out of bounds access setCurrGlyphID(). (CVE-2019-2698)
Slow conversion of BigDecimal to long. (CVE-2019-2602)
Incorrect skeleton selection in RMI registry server-side dispatch handling. (CVE-2019-2684)

References

- https://bugs.mageia.org/show_bug.cgi?id=24682

- https://access.redhat.com/errata/RHSA-2019:0775

- https://www.oracle.com/security-alerts/cpuapr2019.html

- https://www.cve.org/CVERecord?id=CVE-2019-2602

- https://www.cve.org/CVERecord?id=CVE-2019-2684

- https://www.cve.org/CVERecord?id=CVE-2019-2698

Resolution

SRPMS

- 6/core/java-1.8.0-openjdk-1.8.0.212-1.b04.1.mga6

Publication date: 07 May 2019
URL: https://advisories.mageia.org/MGASA-2019-0155.html
Type: security
CVE: CVE-2019-2602, CVE-2019-2684, CVE-2019-2698

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here