| Description: | The java-1.7.0-openjdk packages provide the OpenJDK 7 Java RuntimeEnvironment and the OpenJDK 7 Java Software Development Kit.An off-by-one flaw, leading to a buffer overflow, was found in the fontparsing code in the 2D component in OpenJDK. A specially crafted font filecould possibly cause the Java Virtual Machine to execute arbitrary code,allowing an untrusted Java application or applet to bypass Java sandboxrestrictions. (CVE-2015-0469) |