Bug#905215: CVE-2018-2941

[Markus Koschany]

Hi,

On Wed, 01 Aug 2018 16:45:30 +0200 Moritz Muehlenhoff <jmm at debian.org>
wrote:
> Source: openjfx
> Severity: grave
> Tags: security
> 
> http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
> fixed CVE-2018-2941 in JavaFX, which should affect our openjfx package.

We have recently upgraded OpenJFX to version 11. It is not listed as a
vulnerable version in Oracle's security advisory. I presume if it has
been vulnerable they would have fixed it in OpenJFX 11 too by now. Do
you have more information about this vulnerability because I can't find
any details on the web.

Regards,

Markus

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 963 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-maintainers/attachments/20181007/0606bd84/attachment.sig>