Bug 706241 – CVE-2011-0868 OpenJDK: incorrect numeric type conversion in TransformHelper (2D, 7016495)

Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.

Bug 706241 - (CVE-2011-0868) CVE-2011-0868 OpenJDK: incorrect numeric type conversion in TransformHelper (2D, 7016495)

Summary:	CVE-2011-0868 OpenJDK: incorrect numeric type conversion in TransformHelper (...

Status:	CLOSED ERRATA

Aliases:	CVE-2011-0868

Product:	Security Response
Classification:	Other
Component:	vulnerability (Show other bugs)
Sub Component:
Version:	unspecified
Hardware:	All Linux

Priority	medium Severity medium
Target Milestone:	---
Target Release:	---
Assigned To:	Red Hat Product Security
QA Contact:
Docs Contact:

URL:
Whiteboard:	public=20110607,reported=20110518,sou...
Keywords:	Security

Depends On:	668488 676275 709375 709376 711408 711409 711410 720963 720964 720965
Blocks:
	Show dependency tree / graph

Reported:	2011-05-19 16:39 EDT by Marc Schoenefeld
Modified:	2015-07-29 08:47 EDT (History)
CC List:	6 users (show)

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2015-07-29 08:47:18 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2011:0856	normal	SHIPPED_LIVE	Critical: java-1.6.0-openjdk security update	2011-06-08 10:31:42 EDT
Red Hat Product Errata	RHSA-2011:0857	normal	SHIPPED_LIVE	Important: java-1.6.0-openjdk security update	2011-06-08 10:53:42 EDT
Red Hat Product Errata	RHSA-2011:0860	normal	SHIPPED_LIVE	Critical: java-1.6.0-sun security update	2011-06-08 11:25:07 EDT
Red Hat Product Errata	RHSA-2011:0938	normal	SHIPPED_LIVE	Critical: java-1.6.0-ibm security update	2011-07-15 01:57:15 EDT
Red Hat Product Errata	RHSA-2013:1455	normal	SHIPPED_LIVE	Low: Red Hat Network Satellite server IBM Java Runtime security update	2013-10-23 16:30:21 EDT

Groups: None (edit)

Description Marc Schoenefeld 2011-05-19 16:39:53 EDT

An incorrect float-to-long conversion, leading to an overflow, was found in the way certain objects (such as images and text) were transformed in Java2D. A remote attacker could use this flaw to crash an untrusted applet or application that uses Java2D.

Comment 6 Tomas Hoger 2011-06-08 02:33:32 EDT

Public now via Oracle CPU June 2011:
http://www.oracle.com/technetwork/topics/security/javacpujune2011-313339.html

Also fixed in IcedTea6 versions 1.8.8, 1.9.8 and 1.10.2:
http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2011-June/014607.html

Patch:
http://icedtea.classpath.org/hg/release/icedtea6-1.9/file/8d393fbff5d3/patches/security/20110607/7016495.patch

Comment 7 errata-xmlrpc 2011-06-08 10:32:04 EDT

This issue has been addressed in following products:

  Red Hat Enterprise Linux 6

Via RHSA-2011:0856 https://rhn.redhat.com/errata/RHSA-2011-0856.html

Comment 8 errata-xmlrpc 2011-06-08 10:54:01 EDT

This issue has been addressed in following products:

  Red Hat Enterprise Linux 5

Via RHSA-2011:0857 https://rhn.redhat.com/errata/RHSA-2011-0857.html

Comment 9 errata-xmlrpc 2011-06-08 11:25:33 EDT

This issue has been addressed in following products:

  Extras for RHEL 4
  Supplementary for Red Hat Enterprise Linux 5
  Supplementary for Red Hat Enterprise Linux 6

Via RHSA-2011:0860 https://rhn.redhat.com/errata/RHSA-2011-0860.html

Comment 11 errata-xmlrpc 2011-07-15 01:57:39 EDT

This issue has been addressed in following products:

  Extras for RHEL 4
  Supplementary for Red Hat Enterprise Linux 5
  Supplementary for Red Hat Enterprise Linux 6

Via RHSA-2011:0938 https://rhn.redhat.com/errata/RHSA-2011-0938.html

Comment 12 errata-xmlrpc 2013-10-23 12:58:12 EDT

This issue has been addressed in following products:

  Red Hat Network Satellite Server v 5.4

Via RHSA-2013:1455 https://rhn.redhat.com/errata/RHSA-2013-1455.html

Note You need to log in before you can comment on or make changes to this bug.