[IT-SecNots] [SECURITY] [DSA 4048-1] openjdk-7 security update

[Moritz Muehlenhoff <jmm AT debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4048-1                   security AT debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
November 23, 2017                     https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : openjdk-7
CVE ID         : CVE-2017-10274 CVE-2017-10281 CVE-2017-10285 CVE-2017-10295 
                 CVE-2017-10345 CVE-2017-10346 CVE-2017-10347 CVE-2017-10348 
                 CVE-2017-10349 CVE-2017-10350 CVE-2017-10355 CVE-2017-10356 
                 CVE-2017-10357 CVE-2017-10388

Several vulnerabilities have been discovered in OpenJDK, an
implementation of the Oracle Java platform, resulting in impersonation
of Kerberos services, denial of service, sandbox bypass or HTTP header
injection.

For the oldstable distribution (jessie), these problems have been fixed
in version 7u151-2.6.11-2~deb8u1.

We recommend that you upgrade your openjdk-7 packages.

For the detailed security status of openjdk-7 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/openjdk-7

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAloXRmYACgkQEMKTtsN8
Tja9Nw//fywrBWXdhGycA5a3JcteahX6ZA/cCyA63TQAhER3O4G1mRDtVnv7FMIs
Q8jwoUYv9oihs0f6Ux0b3T57H8K63iD7c9K3gcLfRUozxDc6hGW5g4em/LHvOM78
AGCpPNLxHdduFlyJMepjQ66C0Oyrwhzt1/OX2jvf4a44ExIlEi+3I02ntj5kN3Hg
i4zg5JU5Ky/TWCBVWfl3xxVwPqWIzAMIlLbK647nFKdYxzc7cmWmrdRZ0YpPQyj2
0urRoh+o6T7+X/4BBc3aY2yBykmDMh2yPRDkVjHA6E7cctuSIhjKbfcJDaDmDnqh
CddqVbMAv3egwebF8Y0UYZsGJEA2ZPkyyiFnSRW5jIE4k8GBsy+nHrvIhixjAqzr
AHP03n9Chr8ftSFki9ug+JlUYIOKjc7iJisVLw8XM/Cqpkqp9PVFz+Loxot66Ax4
l5T0orqXjIgomyxx0IpVEK+VD/jxqYjNQ/70tXpiAMoEBnSuFl/EGGQQvZhY+cD+
0Zhj2/1JHW3ruR0ObOAb415+vkPkE360EPLt1gm9uYYn+Jm9y7FohzcVwtwOcIHL
LhjlqWbaLxRUr+eO8Tw/4V/WGA7hNZ5caonR+vQV+Fw7vSiK9gk+T1hAg2yyxKUC
3xJFRM/FZjDYX/fVZR+CVzUTVUuixjnGtLXyatXYO8l6qT0WgWs=
=2OHU
-----END PGP SIGNATURE-----