• [SECURITY] [DSA 2468-1] libjakarta-poi-java security update

    From Florian Weimer@1:229/2 to All on Wed May 9 21:50:02 2012
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-2468-1 [email protected] http://www.debian.org/security/ Florian Weimer
    May 09, 2012 http://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : libjakarta-poi-java
    Vulnerability : unbounded memory allocation
    Problem type : local
    Debian-specific: no
    CVE ID : CVE-2012-0213

    It was discovered that Apache POI, a Java implementation of the
    Microsoft Office file formats, would allocate arbitrary amounts of
    memory when processing crafted documents. This could impact the
    stability of the Java virtual machine.

    For the stable distribution (squeeze), this problem has been fixed in
    version 3.6+dfsg-1+squeeze1.

    We recommend that you upgrade your libjakarta-poi-java packages.

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: http://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.4.10 (GNU/Linux)

    iQEcBAEBAgAGBQJPqs4eAAoJEL97/wQC1SS+vW4H/javD0EcF4EUw9KN9zJb8gJG sBtULjsxoMsKOog5L2HNxKuqnU8dBVnJlO+OleAaaThhS6hg/dytsGjZ0Zclro9W Oe7N3INrTgjNZ1t1+rUUP7p03STjVwClcLXzhuxU5jzCIqJ8kxHfHtZUbwo7O9dQ eUkTGtPQIvRlYv9mQtbb4v526EMiSLKQzWF49rguxHQVnePlZ4cTPCg3/je0NdV8 L+E1iThzqQo1MHFX3jFa4sYU2xz4f/d6R6cxul9ElDRLNqnWLe3dmxgaYbNfpD3y +To3gPtYiW2yaFis58iqTOTN8w+yK+ImjR7Vb6RmQVKripx7eWvKAnprO7THpMA=
    =7m5/
    -----END PGP SIGNATURE-----


    --
    To UNSUBSCRIBE, email to [email protected]
    with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: http://lists.debian.org/[email protected]

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)