PublicDateAtUSN: 2013-04-17
Candidate: CVE-2013-2384
PublicDate: 2013-04-17 18:55:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384
 http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html
 https://ubuntu.com/security/notices/USN-1806-1
 https://ubuntu.com/security/notices/USN-1819-1
 http://site.icu-project.org/download/51#TOC-Known-Issues
 https://ubuntu.com/security/notices/USN-2522-1
Description:
 Unspecified vulnerability in the Java Runtime Environment (JRE) component
 in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0
 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to
 affect confidentiality, integrity, and availability via unknown vectors
 related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2383,
 and CVE-2013-2420. NOTE: the previous information is from the April 2013
 CPU. Oracle has not commented on claims from another vendor that this issue
 is related to "font layout" in the International Components for Unicode
 (ICU) Layout Engine before 51.2.
Ubuntu-Description:
Notes:
 mdeslaur> in lucid+, NetX and the plugin moved to the icedtea-web package
 jdstrand> sun-java6 is not redistributable, no longer in the archive and
  no longer tracked
 jdstrand> sun-java5 is EOL upstream and no longer tracked
 jdstrand> as of 2013-04-19, IcedTea has not released 2.3.9 or 1.12.5 to fix
  this issue
Bugs:
 http://bugs.icu-project.org/trac/ticket/10107
 http://bugs.icu-project.org/trac/ticket/10143
Priority: medium
Discovered-by:
Assigned-to:
CVSS: 

Patches_openjdk-6:
upstream_openjdk-6: released (6u45)
hardy_openjdk-6: ignored (reached end-of-life)
lucid_openjdk-6: released (6b27-1.12.5-0ubuntu0.10.04.1)
oneiric_openjdk-6: released (6b27-1.12.5-0ubuntu0.11.10.1)
precise_openjdk-6: released (6b27-1.12.5-0ubuntu0.12.04.1)
quantal_openjdk-6: released (6b27-1.12.5-0ubuntu0.12.10.1)
raring_openjdk-6: released (6b27-1.12.5-1ubuntu1)
trusty_openjdk-6: not-affected
trusty/esm_openjdk-6: DNE (trusty was not-affected)
utopic_openjdk-6: not-affected
devel_openjdk-6: not-affected

Patches_openjdk-7:
upstream_openjdk-7: released (7u21)
hardy_openjdk-7: DNE
lucid_openjdk-7: DNE
oneiric_openjdk-7: released (7u21-2.3.9-0ubuntu0.11.10.1)
precise_openjdk-7: released (7u21-2.3.9-0ubuntu0.12.04.1)
quantal_openjdk-7: released (7u21-2.3.9-0ubuntu0.12.10.1)
raring_openjdk-7: released (7u21-2.3.9-1ubuntu1)
trusty_openjdk-7: not-affected
trusty/esm_openjdk-7: DNE (trusty was not-affected)
utopic_openjdk-7: not-affected
devel_openjdk-7: not-affected

Patches_openjdk-6b18:
upstream_openjdk-6b18: needs-triage
hardy_openjdk-6b18: DNE
lucid_openjdk-6b18: ignored (reached end-of-life)
oneiric_openjdk-6b18: ignored (superseded by openjdk-6)
precise_openjdk-6b18: DNE
quantal_openjdk-6b18: DNE
raring_openjdk-6b18: DNE
trusty_openjdk-6b18: DNE
trusty/esm_openjdk-6b18: DNE
utopic_openjdk-6b18: DNE
devel_openjdk-6b18: DNE

Patches_icedtea-web:
upstream_icedtea-web: not-affected
hardy_icedtea-web: DNE
lucid_icedtea-web: not-affected
oneiric_icedtea-web: not-affected
precise_icedtea-web: not-affected
quantal_icedtea-web: not-affected
raring_icedtea-web: not-affected
trusty_icedtea-web: not-affected
trusty/esm_icedtea-web: DNE (trusty was not-affected)
utopic_icedtea-web: not-affected
devel_icedtea-web: not-affected

Patches_icu:
 upstream: http://bugs.icu-project.org/trac/changeset/33535 (trunk)
 upstream: http://bugs.icu-project.org/trac/changeset/33537 (51.1.1)
 upstream: http://bugs.icu-project.org/trac/changeset/33538 (docs)
 upstream: http://bugs.icu-project.org/trac/changeset/33540 (api doc)
 upstream: http://bugs.icu-project.org/trac/changeset/33712 (mem leak)
 upstream: http://download.icu-project.org/files/icu4c/51.1/icu-51-layout-fix-10107.tgz
upstream_icu: released (51.2)
lucid_icu: ignored (reached end-of-life)
precise_icu: released (4.8.1.1-3ubuntu0.3)
trusty_icu: not-affected (52.1-3)
trusty/esm_icu: not-affected (52.1-3)
utopic_icu: not-affected (52.1-6)
devel_icu: not-affected (52.1-7.1)