[IT-SecNots] [SECURITY] [DSA 3339-1] openjdk-6 security update

[Moritz Muehlenhoff <jmm AT debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3339-1                   security AT debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
August 19, 2015                       https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : openjdk-6
CVE ID         : CVE-2015-2590 CVE-2015-2601 CVE-2015-2613 CVE-2015-2621 
                 CVE-2015-2625 CVE-2015-2628 CVE-2015-2632 CVE-2015-2808
                 CVE-2015-4000 CVE-2015-4731 CVE-2015-4732 CVE-2015-4733
                 CVE-2015-4748 CVE-2015-4749 CVE-2015-4760

Several vulnerabilities have been discovered in OpenJDK, an
implementation of the Oracle Java platform, resulting in the execution
of arbitrary code, breakouts of the Java sandbox, information disclosure,
denial of service or insecure cryptography.
                                 
For the oldstable distribution (wheezy), these problems have been fixed
in version 6b36-1.13.8-1~deb7u1.

We recommend that you upgrade your openjdk-6 packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBAgAGBQJV1ORoAAoJEBDCk7bDfE42zBoP/AscgmbgvoRKFRkxMCjNyDns
iMWVGpvt5Axsv576uHdhqKGnEFhVCUwHEqcFBTNKwn8AAj1sBuH7pK4M6P0aPjLu
7IvSzfIPdQ0PabFhJmeGcrc4CEswRGmumV2HRnfkvvcgxffwF4jJNYwwAr7anWxq
yQSNWxu1HkwW8r/QKlU6D9tTgIgktp0t39St1U6WTxpTrTnI1Po8d6RHNE0HzDQn
XEVtU2LGLqW712WTpP0d0MOZOO+AuxBWxqjfYpIkTVUC6kbQeV+4on44jMenECnI
CyQnQskFTsChLkoYpbTxtV6DAxPWvqj6Ps3IwwNnWksa327CO4Yzwf93+uUby78W
4BM8bYJ0AgN+IdEqJ8EtyaYyCXJmpWTgs+zh8pkRgU1gmsr5qAug/IOttAVApf+g
z731jHSXIjwhEyILwPQCm7/zfpJtOgeBGlJFbD+JEGmK0hJOpiWVUpN/ZN/Bl7km
obLjZD8cfD/DzkIeKYMGdRW5zbVlemz/mGI3xJV7LBq3Isyj3AXopCI4G0U964Xq
gCftCF+UrD+ZAepPz8/b08C3b2vX2bT4FzYY002Bq9qqD/f66OJw6WnGeCFRABlC
/vt+p3wFc1sjzDAXj67oJjBbl/tZeFH2mflKLulCiGwFB3gMx62552pEUYgosFZs
VOYPhnjlH3QVaYnFKmFb
=ng8s
-----END PGP SIGNATURE-----