advisories/24682.adv

type: security
subject: Updated java-1.8.0-openjdk packages fix security vulnerability
CVE:
 - CVE-2019-2602
 - CVE-2019-2684
 - CVE-2019-2698
src:
  6:
   core:
     - java-1.8.0-openjdk-1.8.0.212-1.b04.1.mga6
description: |
  The updated packages fix several bugs and some security issues:

  Font layout engine out of bounds access setCurrGlyphID(). (CVE-2019-2698)

  Slow conversion of BigDecimal to long. (CVE-2019-2602)

  Incorrect skeleton selection in RMI registry server-side dispatch
  handling. (CVE-2019-2684)
references:
 - https://bugs.mageia.org/show_bug.cgi?id=24682
 - https://access.redhat.com/errata/RHSA-2019:0775
 - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html#AppendixJAVA
1	davidwhodgins	8482	type: security
2			subject: Updated java-1.8.0-openjdk packages fix security vulnerability
3			CVE:
4			- CVE-2019-2602
5			- CVE-2019-2684
6			- CVE-2019-2698
7			src:
8			6:
9			core:
10			- java-1.8.0-openjdk-1.8.0.212-1.b04.1.mga6
11			description: \|
12			The updated packages fix several bugs and some security issues:
13
14			Font layout engine out of bounds access setCurrGlyphID(). (CVE-2019-2698)
15
16			Slow conversion of BigDecimal to long. (CVE-2019-2602)
17
18			Incorrect skeleton selection in RMI registry server-side dispatch
19			handling. (CVE-2019-2684)
20			references:
21			- https://bugs.mageia.org/show_bug.cgi?id=24682
22			- https://access.redhat.com/errata/RHSA-2019:0775
23			- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html#AppendixJAVA