Red Hat Enterprise Linux: An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux
6.
Red Hat Product Security has rated this update as having a security impact of
Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a
detailed severity rating, is available for each vulnerability from the CVE
link(s) in the References section.
CVE-2016-0636
Whenever computer users get attacked by a type of malware or ransomware, their first reaction is to, probably, get angry. Well, we can assure you that the same thing happens when a hacker’s work is blocked by our Protection Lab guys, which are doing a great job fighting the newest threats on the market.
A security issue affects these releases of Ubuntu and its
derivatives:
Ubuntu 15.10
Ubuntu 14.04 LTS
Summary
OpenJDK could be made to crash or run programs as your login if it received
specially crafted input.
Software description
openjdk-7
– Open Source Java implementation
Details
A vulnerability was discovered in the JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service, expose sensitive data over the network, or possibly execute arbitrary code.
Update instructions
The problem can be corrected by updating your system to the following
package version:
This update uses a new upstream release, which includes additional bug fixes. After a standard system update you need to restart any Java applications or applets to make all the necessary changes.
The results of a survey conducted by Kaspersky Lab and B2B International show that every fourth company risks losing access to business-critical systems, due to the lack of an anti-DDoS protection in place.