Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

Ubuntu 15.10 & 14.04 LTS USN-2964-1 Moderate: OpenJDK 7 Security Issues

ubuntu
Calendar Grey May 5, 2016
Scroller Ubuntu
Explore OpenJDK 8 patches targeting various security issues in Ubuntu. Verify that your system is up to date.
Several security issues were fixed in OpenJDK 7.

Summary

Several security issues were fixed in OpenJDK 7.

Software Description:

- openjdk-7: Open Source Java implementation

Details:

Multiple vulnerabilities were discovered in the OpenJDK JRE related to information

disclosure, data integrity, and availability. An attacker could exploit

these to cause a denial of service, expose sensitive data over the network,

or possibly execute arbitrary code. (CVE-2016-0686, CVE-2016-0687,

CVE-2016-3427)

A vulnerability was discovered in the OpenJDK JRE related to information

disclosure. An attacker could exploit this to expose sensitive data over

the network. (CVE-2016-0695)

A vulnerability was discovered in the OpenJDK JRE related to availability.

An attacker could exploit this to cause a denial of service.

(CVE-2016-3425)

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu moderate threat information disclosure Java OpenJDK

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.10:
  icedtea-7-jre-jamvm             7u101-2.6.6-0ubuntu0.15.10.1
  openjdk-7-jdk                   7u101-2.6.6-0ubuntu0.15.10.1
  openjdk-7-jre                   7u101-2.6.6-0ubuntu0.15.10.1
  openjdk-7-jre-headless          7u101-2.6.6-0ubuntu0.15.10.1
  openjdk-7-jre-lib               7u101-2.6.6-0ubuntu0.15.10.1
  openjdk-7-jre-zero              7u101-2.6.6-0ubuntu0.15.10.1
  openjdk-7-source                7u101-2.6.6-0ubuntu0.15.10.1

Ubuntu 14.04 LTS:
  icedtea-7-jre-jamvm             7u101-2.6.6-0ubuntu0.14.04.1
  openjdk-7-jdk                   7u101-2.6.6-0ubuntu0.14.04.1
  openjdk-7-jre                   7u101-2.6.6-0ubuntu0.14.04.1
  openjdk-7-jre-headless          7u101-2.6.6-0ubuntu0.14.04.1
  openjdk-7-jre-lib               7u101-2.6.6-0ubuntu0.14.04.1
  openjdk-7-jre-zero              7u101-2.6.6-0ubuntu0.14.04.1
  openjdk-7-source                7u101-2.6.6-0ubuntu0.14.04.1

This update uses a new upstream release, which includes additional
bug fixes. After a standard system update you need to restart any
Java applications or applets to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2964-1

CVE-2016-0686, CVE-2016-0687, CVE-2016-0695, CVE-2016-3425,

CVE-2016-3427

May 05, 2016

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu moderate threat information disclosure Java OpenJDK

Package Information

https://launchpad.net/ubuntu/+source/openjdk-7/7u101-2.6.6-0ubuntu0.15.10.1
https://launchpad.net/ubuntu/+source/openjdk-7/7u101-2.6.6-0ubuntu0.14.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.