Errata overview
Errata ID 186
Date 2016-06-02
Source package openjdk-7
Fixed in version 7u101-2.6.6-2.31.201605041712
Description
Multiple vulnerabilities have been discovered in the implementation
of the Java platform. In Univention Corporate Server OpenJDK is
used instead of Oracle Java. This erratum updates OpenJDK to the
release based on 7u101 which fixes these issues:
* Better URL processing (CVE-2016-0402)
* Better attributes processing (CVE-2016-0448)
* Reinforce JMX collector internals (S8132210)
* Better printing dialogues (S8132988)
* More general limits (CVE-2016-0466)
* JMX memory management improvements (S8137060)
* Better font substitutions (S8139012)
* More stable image decoding (CVE-2016-0483)
* Arrange font actions (CVE-2016-0494)
* Cleanup for handling proxies (S8143185)
* Update splashscreen displays (CVE-2015-8126, CVE-2015-8472)
* Very difficult to exploit vulnerability allows successful unauthenticated
  network attacks via multiple protocols. (CVE-2015-7575)
* Ensure thread consistency (CVE-2016-0686, S8129952)
* Better byte behavior (CVE-2016-0687, S8132051)
* Make DSA more fair (CVE-2016-0695, S8138593)
* Better state table management (S8139008)
* Better buffering of XML strings (CVE-2016-3425, S8143167)
* Improve JMX connections (CVE-2016-3427, S8144430)
* Improve MethodHandle consistency (CVE-2016-0636, S8152335)
Additional notes
CVE ID CVE-2016-0402
CVE-2016-0448
CVE-2016-0466
CVE-2016-0483
CVE-2016-0494
CVE-2015-8126
CVE-2015-8472
CVE-2015-7575
CVE-2016-0686
CVE-2016-0687
CVE-2016-0695
CVE-2016-3425
CVE-2016-3427
CVE-2016-0636
UCS Bug number #40483