CVE-2011-3548

Affecting openjdk-jre package, versions [,1.7.0_1)

Overview

openjdk-jre is a free and open-source implementation of the Java Platform, Standard Edition (Java SE).

Affected versions of this package are vulnerable to CVE-2011-3548. It allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability, related to AWT.

Remediation

Upgrade openjdk-jre to version 7.0.1 or higher.

References

• CONFIRM
• Gentoo Security Advisory
• HP Security Bulletin
• OpenSuse Security Announcement
• Oracle Security Bulletin
• Osvdb Security Advisory
• Oval Security
• RedHat Security Advisory
• Secunia Advisory
• Security Focus
• Security Tracker
• Ubuntu Security Advisory
• X-force Vulnerability Report