Debian Bug report logs -
#775884
CVE-2014-6591 CVE-2014-6585
Package:
icu;
Maintainer for icu is Laszlo Boszormenyi (GCS) <gcs@debianorg>;
Reported by: Moritz Muehlenhoff <jmm@inutilorg>
Date: Wed, 21 Jan 2015 06:45:02 UTC
Severity: important
Tags: security
Fixed in version icu/521-7
Done: Jay Berkenbilt <qjb ...
ICU could be made to crash or run programs as your login if it processed
specially crafted data ...
ICU could be made to crash or run programs as your login if it processed
specially crafted data ...
USN-2522-1 introduced a regression in ICU ...
Several security issues were fixed in OpenJDK 7 ...
Several security issues were fixed in OpenJDK 6 ...
Several vulnerabilities have been discovered in OpenJDK, an
implementation of the Oracle Java platform, resulting in the execution
of arbitrary code, information disclosure or denial of service
For the stable distribution (wheezy), these problems have been fixed in
version 7u75-254-1~deb7u1
For the upcoming stable distribution (jessie), these p ...
Several vulnerabilities have been discovered in OpenJDK, an
implementation of the Oracle Java platform, resulting in the execution
of arbitrary code, information disclosure or denial of service
For the stable distribution (wheezy), these problems have been fixed in
version 6b34-1136-1~deb7u1
We recommend that you upgrade your openjdk-6 packages ...
Synopsis
Critical: java-160-ibm security update
Type/Severity
Security Advisory: Critical
Topic
Updated java-160-ibm packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 5 and 6 SupplementaryRed Hat Product Security has rated this update as having Critical securityimp ...
Synopsis
Important: java-150-ibm security update
Type/Severity
Security Advisory: Important
Topic
Updated java-150-ibm packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 5 and 6 SupplementaryRed Hat Product Security has rated this update as having Important security ...
Synopsis
Critical: java-170-oracle security update
Type/Severity
Security Advisory: Critical
Topic
Updated java-170-oracle packages that fix several security issues are nowavailable for Oracle Java for Red Hat Enterprise Linux 5, 6, and 7Red Hat Product Security has rated this update as having Critical ...
Synopsis
Important: java-180-openjdk security update
Type/Severity
Security Advisory: Important
Topic
Updated java-180-openjdk packages that fix multiple security issues arenow available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having Important securityimpact Com ...
Synopsis
Critical: java-170-ibm security update
Type/Severity
Security Advisory: Critical
Topic
Updated java-170-ibm packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 5 SupplementaryRed Hat Product Security has rated this update as having Critical securityimpact C ...
Synopsis
Important: java-170-openjdk security update
Type/Severity
Security Advisory: Important
Topic
Updated java-170-openjdk packages that fix multiple security issues arenow available for Red Hat Enterprise Linux 5Red Hat Product Security has rated this update as having Important securityimpact Com ...
Synopsis
Critical: java-180-oracle security update
Type/Severity
Security Advisory: Critical
Topic
Updated java-180-oracle packages that fix several security issues are nowavailable for Oracle Java for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having Critical securityi ...
Synopsis
Important: java-160-openjdk security update
Type/Severity
Security Advisory: Important
Topic
Updated java-160-openjdk packages that fix multiple security issues arenow available for Red Hat Enterprise Linux 5, 6, and 7Red Hat Product Security has rated this update as having Important securityi ...
Synopsis
Critical: java-171-ibm security update
Type/Severity
Security Advisory: Critical
Topic
Updated java-171-ibm packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 6 and 7 SupplementaryRed Hat Product Security has rated this update as having Critical securityimp ...
Synopsis
Low: Red Hat Satellite IBM Java Runtime security update
Type/Severity
Security Advisory: Low
Topic
Updated java-160-ibm packages that fix several security issues are nowavailable for Red Hat Satellite 56Red Hat Product Security has rated this update as having Low securityimpact Common Vulnerab ...
Synopsis
Low: Red Hat Satellite IBM Java Runtime security update
Type/Severity
Security Advisory: Low
Topic
Updated java-160-ibm packages that fix several security issues are nowavailable for Red Hat Satellite 57Red Hat Product Security has rated this update as having Low securityimpact Common Vulnerab ...
Synopsis
Critical: java-170-openjdk security update
Type/Severity
Security Advisory: Critical
Topic
Updated java-170-openjdk packages that fix multiple security issues arenow available for Red Hat Enterprise Linux 6 and 7Red Hat Product Security has rated this update as having Critical securityimpact ...
Synopsis
Important: java-160-sun security update
Type/Severity
Security Advisory: Important
Topic
Updated java-160-sun packages that fix several security issues are nowavailable for Oracle Java for Red Hat Enterprise Linux 5, 6, and 7Red Hat Product Security has rated this update as having Important se ...
A boundary check flaw was found in the font parsing code in the 2D component in OpenJDK A specially crafted font file could allow an untrusted Java application or applet to disclose portions of the Java Virtual Machine memory ...
Multiple flaws were found in the way the Hotspot component in OpenJDK verified bytecode from the class files, and in the way this component generated code for bytecode An untrusted Java application or applet could possibly use these flaws to bypass Java sandbox restrictions (CVE-2014-6601, CVE-2015-0437)
Multiple improper permission check issues ...
A flaw was found in the way the Hotspot component in OpenJDK verified bytecode from the class files An untrusted Java application or applet could possibly use this flaw to bypass Java sandbox restrictions (CVE-2014-6601)
Multiple improper permission check issues were discovered in the JAX-WS, and RMI components in OpenJDK An untrusted Java appli ...
A flaw was found in the way the Hotspot component in OpenJDK verified bytecode from the class files An untrusted Java application or applet could possibly use this flaw to bypass Java sandbox restrictions (CVE-2014-6601)
Multiple improper permission check issues were discovered in the JAX-WS, and RMI components in OpenJDK An untrusted Java appli ...
Vulmon