← Back to branch summary

~ubuntu-security/ubuntu-cve-tracker/master

« back to all changes in this revision

Viewing changes to retired/CVE-2013-2452

  • Committer: Steve Beattie
  • Date: 2019-02-19 06:18:27 UTC
  • Revision ID: sbeattie@ubuntu.com-20190219061827-oh57fzcfc1u9dlfk
The ubuntu-cve-tracker project has been converted to git.

Please use 'git clone https://git.launchpad.net/ubuntu-cve-tracker' to
get the converted tree.

Show diffs side-by-side

added added

removed removed

Lines of Context:
retired/CVE-2013-2452
1
 
PublicDateAtUSN: 2013-06-18
2
 
Candidate: CVE-2013-2452
3
 
PublicDate: 2013-06-18
4
 
References:
5
 
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2452
6
 
 http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html
7
 
 http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html
8
 
 http://blog.fuseyism.com/index.php/2013/06/19/imminent-icedtea-web-breakage/
9
 
 https://usn.ubuntu.com/usn/usn-1907-1
10
 
 https://usn.ubuntu.com/usn/usn-1908-1
11
 
Description:
12
 
 Unspecified vulnerability in the Java Runtime Environment (JRE) component
13
 
 in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0
14
 
 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect
15
 
 confidentiality via unknown vectors related to Libraries, a different
16
 
 vulnerability than CVE-2013-2443 and CVE-2013-2455.  NOTE: the previous
17
 
 information is from the June 2013 CPU. Oracle has not commented on claims
18
 
 from another vendor that this issue is related to "network address handling
19
 
 in virtual machine identifiers" and the lack of "unique and unpredictable
20
 
 IDs" in the java.rmi.dgc.VMID class.
21
 
Ubuntu-Description:
22
 
Notes:
23
 
 mdeslaur> in lucid+, NetX and the plugin moved to the icedtea-web package
24
 
 jdstrand> sun-java6 is not redistributable, no longer in the archive and
25
 
  no longer tracked
26
 
 jdstrand> sun-java5 is EOL upstream and no longer tracked
27
 
 jdstrand> as of 2013-06-19, upstream IcedTea updates are not available
28
 
 jdstrand> updates break the icedtea-web plugin and it will need this fix:
29
 
  http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-June/023745.html
30
 
Bugs:
31
 
Priority: medium
32
 
Discovered-by:
33
 
Assigned-to: jdstrand
34
 
 
35
 
Patches_openjdk-6:
36
 
upstream_openjdk-6: pending (6b27-1.12.6)
37
 
lucid_openjdk-6: released (6b27-1.12.6-1ubuntu0.10.04.1)
38
 
precise_openjdk-6: released (6b27-1.12.6-1ubuntu0.12.04.1)
39
 
quantal_openjdk-6: released (6b27-1.12.6-1ubuntu0.12.10.2)
40
 
raring_openjdk-6: released (6b27-1.12.6-1ubuntu0.13.04.2)
41
 
devel_openjdk-6: not-affected (6b27-1.12.6-1ubuntu1)
42
 
 
43
 
Patches_openjdk-7:
44
 
upstream_openjdk-7: pending (2.3.10)
45
 
lucid_openjdk-7: DNE
46
 
precise_openjdk-7: released (7u25-2.3.10-1ubuntu0.12.04.2)
47
 
quantal_openjdk-7: released (7u25-2.3.10-1ubuntu0.12.10.2)
48
 
raring_openjdk-7: released (7u25-2.3.10-1ubuntu0.13.04.2)
49
 
devel_openjdk-7: not-affected (7u25-2.3.10-2ubuntu1)
50
 
 
51
 
Patches_openjdk-6b18:
52
 
upstream_openjdk-6b18: needs-triage
53
 
lucid_openjdk-6b18: ignored (reached end-of-life)
54
 
precise_openjdk-6b18: DNE
55
 
quantal_openjdk-6b18: DNE
56
 
raring_openjdk-6b18: DNE
57
 
devel_openjdk-6b18: DNE