Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Ubuntu 14.04 LTS USN-2319-2 Moderate OpenJDK 7 Regression Threat

ubuntu
Calendar Grey August 26, 2014
Scroller Ubuntu
Ubuntu Security Notice USN-2319-2 addresses a critical regression in OpenJDK 7, potentially impacting application performance and security. Users must take immediate action to upgrade.
USN-2319-1 introduced a regression in OpenJDK 7.

Summary

USN-2319-1 introduced a regression in OpenJDK 7.

Software Description:

- openjdk-7: Open Source Java implementation

Details:

USN-2319-1 fixed vulnerabilities in OpenJDK 7. Due to an upstream

regression, verifying of the init method call would fail when it was done

from inside a branch when stack frames are activated. This update fixes the

problem.

We apologize for the inconvenience.

Original advisory details:

Several vulnerabilities were discovered in the OpenJDK JRE related to

information disclosure, data integrity and availability. An attacker could

exploit these to cause a denial of service or expose sensitive data over

the network. (CVE-2014-2483, CVE-2014-2490, CVE-2014-4216, CVE-2014-4219,

CVE-2014-4223, CVE-2014-4262)

Several vulnerabilities were discovered in the OpenJDK JRE related to

information disclosure and data integrity. An attacker could exploit these

to expose sensitive data over the network. (CVE-2014-4209, CVE-2014-4244,

...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu update instructions regression Java security OpenJDK

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
  icedtea-7-jre-jamvm             7u65-2.5.1-4ubuntu1~0.14.04.2
  openjdk-7-jre                   7u65-2.5.1-4ubuntu1~0.14.04.2
  openjdk-7-jre-headless          7u65-2.5.1-4ubuntu1~0.14.04.2
  openjdk-7-jre-lib               7u65-2.5.1-4ubuntu1~0.14.04.2
  openjdk-7-jre-zero              7u65-2.5.1-4ubuntu1~0.14.04.2

After a standard system update you need to restart any Java applications
to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2319-2

https://ubuntu.com/security/notices/USN-2319-1

https://bugs.launchpad.net/ubuntu/+source/openjdk-7/+bug/1360392

=========================================================================Ubuntu Security Notice USN-2319-2

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu update instructions regression Java security OpenJDK

Package Information

https://launchpad.net/ubuntu/+source/openjdk-7/7u65-2.5.1-4ubuntu1~0.14.04.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.