Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 598
Alerts This Week
Warning Icon 1 598

Ubuntu 16.04 LTS USN-3043-1 Moderate: OpenJDK 8 Denial Of Service

ubuntu
Calendar Grey July 27, 2016
Scroller Ubuntu
The Ubuntu Security Notice USN-4044-1 announces critical updates for OpenJDK 11, focusing on vulnerabilities that could lead to information leakage and system stability challenges.
Several security issues were fixed in OpenJDK 8.

Summary

Several security issues were fixed in OpenJDK 8.

Software Description:

- openjdk-8: Open Source Java implementation

Details:

Multiple vulnerabilities were discovered in the OpenJDK JRE related to

information disclosure, data integrity, and availability. An attacker

could exploit these to cause a denial of service, expose sensitive data

over the network, or possibly execute arbitrary code. (CVE-2016-3587,

CVE-2016-3598, CVE-2016-3606, CVE-2016-3610)

A vulnerability was discovered in the OpenJDK JRE related to data

integrity. An attacker could exploit this to expose sensitive data

over the network or possibly execute arbitrary code. (CVE-2016-3458)

Multiple vulnerabilities were discovered in the OpenJDK JRE related

to availability. An attacker could exploit these to cause a denial

of service. (CVE-2016-3500, CVE-2016-3508)

A vulnerability was discovered in the OpenJDK JRE related to

information disclosure. An attacker could exploit this to expose

sensitive data over the network...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory moderate denial of service information disclosure ubuntu data exposure openjdk

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  openjdk-8-jdk                   8u91-b14-3ubuntu1~16.04.1
  openjdk-8-jre                   8u91-b14-3ubuntu1~16.04.1
  openjdk-8-jre-headless          8u91-b14-3ubuntu1~16.04.1
  openjdk-8-jre-jamvm             8u91-b14-3ubuntu1~16.04.1
  openjdk-8-jre-zero              8u91-b14-3ubuntu1~16.04.1

After a standard system update you need to restart any Java
applications or applets to make all the necessary changes.

References

CVE-2016-3458, CVE-2016-3500, CVE-2016-3508, CVE-2016-3550,

CVE-2016-3587, CVE-2016-3598, CVE-2016-3606, CVE-2016-3610

July 27, 2016

Topics%20covered

Topics Covered

security advisory moderate denial of service information disclosure ubuntu data exposure openjdk

Package Information

https://launchpad.net/ubuntu/+source/openjdk-8/8u91-b14-3ubuntu1~16.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.