Description: | The java-1.6.0-openjdk packages provide the OpenJDK 6 Java RuntimeEnvironment and the OpenJDK 6 Java Software Development Kit.An off-by-one flaw, leading to a buffer overflow, was found in the fontparsing code in the 2D component in OpenJDK. A specially crafted font filecould possibly cause the Java Virtual Machine to execute arbitrary code,allowing an untrusted Java application or applet to bypass Java sandboxrestrictions. (CVE-2015-0469) |