Security Update for openjdk-7
Summary
DLA-1339-1: openjdk-7 - security update. Affects openjdk-7 versions < 7u171-2.6.13-1~deb7u1. Fixed in 7u171-2.6.13-1~deb7u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenJDK is an implementation of the Oracle Java platform. It provides a runtime environment for executing Java applications and supports various features and libraries. OpenJDK 7 is the version specifically affected by this security update.
Vulnerability Detail
Multiple vulnerabilities have been discovered in OpenJDK 7. These vulnerabilities can lead to denial of service, unauthorized access, sandbox bypass, or HTTP header injection. The specific vulnerabilities and their potential impact are as follows:
- CVE-2018-2579: Denial of service
- CVE-2018-2588: Unauthorized access
- CVE-2018-2599: Sandbox bypass
- CVE-2018-2602: HTTP header injection
- CVE-2018-2603: Denial of service
- CVE-2018-2618: Unauthorized access
- CVE-2018-2629: Sandbox bypass
- CVE-2018-2633: Denial of service
- CVE-2018-2634: Unauthorized access
- CVE-2018-2637: Sandbox bypass
- CVE-2018-2641: Denial of service
- CVE-2018-2663: Unauthorized access
- CVE-2018-2677: Sandbox bypass
- CVE-2018-2678: Denial of service
How To Fix
Minimum fixed version
7u171-2.6.13-1~deb7u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade openjdk-7Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Upgrading your openjdk-7 packages to version 7u171-2.6.13-1~deb7u1 is crucial to address the multiple vulnerabilities discovered in OpenJDK 7. This security update will patch the vulnerabilities and ensure the security of your system. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for openjdk-7 →
FAQ
OpenJDK is an open-source implementation of the Java platform, providing a runtime environment for executing Java applications.
These vulnerabilities can lead to denial of service, unauthorized access, sandbox bypass, or HTTP header injection. Depending on the specific vulnerability, an attacker may be able to disrupt the availability of the system, gain unauthorized access to sensitive information, bypass security measures, or manipulate HTTP headers.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities.
No specific workaround has been mentioned for these vulnerabilities. It is recommended to upgrade to the fixed version of openjdk-7 to ensure the vulnerabilities are patched.
You can find more information about Debian LTS security advisories, including how to apply updates and frequently asked questions, on the Debian LTS wiki: https://wiki.debian.org/LTS
Related vulnerabilities
Recent vulnerabilities recorded for openjdk-7.
