-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4185-1 security@xxxxxxxxxx https://www.debian.org/security/ Moritz Muehlenhoff April 28, 2018 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : openjdk-8 CVE ID : CVE-2018-2790 CVE-2018-2794 CVE-2018-2795 CVE-2018-2796 CVE-2018-2797 CVE-2018-2798 CVE-2018-2799 CVE-2018-2800 CVE-2018-2814 CVE-2018-2815 Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in denial of service, sandbox bypass, execution of arbitrary code or bypass of JAR signature validation. For the stable distribution (stretch), these problems have been fixed in version 8u171-b11-1~deb9u1. We recommend that you upgrade your openjdk-8 packages. For the detailed security status of openjdk-8 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/openjdk-8 Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@xxxxxxxxxxxxxxxx -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAlrk2jwACgkQEMKTtsN8 TjY9+BAAs4wrU7VUSpAZEfTQZg/Fdt1op3hndWIGmu5DuCuY82hjYOuIeWgNFxS0 aXxmgDrzsLcXHX33ngX1LxVhzNmna+jjCLj++s/E5rsORRXM1ICpUSDHQg096MHb o5KAqnqduWK32KsxMzqgR0JMsXXMJUJGlALIU7z/Dzpg8lJGhBIqdsQQlvvWl0SB eFAzCjCyKj3MtWN7GJDW9+0QHgw0LZjB8NidGD71SiiOTv/O5xHDeaGaCzfRMc9p cABTiQoDCl91n1st2iz0ulZJnXbn5b1nojhAtb4R9KVGNP0UI0JWfo3kfrCHyk6E RiDMF2HnW9H5ZluAGWTH7WHnqP0uyjASiPGMjq6fRUAgBRJAcLCjEVTRMjzjpXGj GHzuL1YEtmZAmaEd2HvVWuIIDV6bozy6tv0pDNPpex8of/oEtFViO5KjS4CpPl6r VsScevidzcz6l0wblT8KxDdCyzDL6+tx/JPh2WG4ahlr7gJn/xR13RTzXH2ShGsF ggi30u6mM43e3j7OhnhzgH0dJu3c9ZKy2bfqFcl/TUpAbwp7hxruJIsjR5AnarCt 2hZr7IqrhEHANxlhRVm7GSmzjanKRk4yMgAiAABR7dyrXPfGoIq+xo0UToyuL6/r PLvHs04N+1Mf45elu051VJ5UHzdYfuS+W2hPhrMZ4TmJVIwgnmc= =j0FZ -----END PGP SIGNATURE-----
