Bug 578300 – <dev-java/icedtea{,-bin}-7.2.6.5: unspecified vulnerability (CVE-2016-0636)

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description James Le Cuirot 2016-03-26 14:37:52 UTC]

I'm going to bump icedtea and icedtea-bin now. icedtea doesn't get marked stable so the vulnerable versions will be cleared immediately.

[Comment 1 James Le Cuirot 2016-03-27 08:47:40 UTC]

Bumped. amd64 and x86 arch teams, please stabilise:
dev-java/icedtea-bin-7.2.6.5

[Comment 2 Agostino Sarubbo 2016-03-27 09:37:54 UTC]

amd64 stable

[Comment 3 Agostino Sarubbo 2016-03-27 09:38:42 UTC]

x86 stable.

Maintainer(s), please cleanup.

[Comment 4 James Le Cuirot 2016-03-27 11:33:47 UTC]

Thanks! Old removed. Security team, please continue.

[Comment 5 GLSAMaker/CVETool Bot 2016-03-28 10:42:27 UTC]

CVE-2016-0636 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-0636):
  Unspecified vulnerability in Oracle Java SE 7u97, 8u73, and 8u74 allows
  remote attackers to affect confidentiality, integrity, and availability via
  unknown vectors related to the Hotspot sub-component.

[Comment 6 Aaron Bauman (RETIRED) 2016-06-25 12:24:08 UTC]

GLSA request filed.

[Comment 7 GLSAMaker/CVETool Bot 2016-06-27 22:43:10 UTC]

This issue was resolved and addressed in
 GLSA 201606-18 at https://security.gentoo.org/glsa/201606-18
by GLSA coordinator Aaron Bauman (b-man).