Eclipse bugfix requires Java 1.5.0_08

Bug #122806 reported by renestach
This bug report is a duplicate of:  Bug #80569: Java 1.5.0_08 security problem. Edit Remove
260
Affects Status Importance Assigned to Milestone
sun-java5 (Ubuntu)
Invalid
Wishlist
Unassigned

Bug Description

Binary package hint: sun-java5-jdk

Open-Xchange has just released a new beta product and many customers have problems to log into the administration interface. This has been reported as bug 7972 http://www.open-xchange.org/bugzilla/show_bug.cgi?id=7972

The Open-Xchange bug is a result of a bug in the Eclipse OSGi plugin reported as bug https://bugs.eclipse.org/bugs/attachment.cgi?id=71379&action=view

Unfortunately, the fix for the Eclipse bug triggers another bug in Sun Java5 which has been reported as bug http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=469998. This bug is fixed in the most current stable version 1.5.0_08.

In summary, updated packages for Sun Java5 fix the Eclipse issue and thus the Open-Xchange bug. There seems to be no other solution to fix this. It would be great if Ubuntu shipped the current stable version for Ubuntu 6.06 LTS.

CVE References

Revision history for this message
Torsten Spindler (tspindler) wrote :

The open-xchange.org bugtracker doesn't seem to work. Can you confirm that the bug does not occur when you install 1.5.0_08 from Sun and use this instead?

Revision history for this message
renestach (rene-stach) wrote :

Yes, we verified this. We can reproduce easily with 1.5.0_06 but we cannot reproduce with 1.5.0_08.

BTW: Open-Xchange BTS has been updated yesterday. Pls try again.

Revision history for this message
Carsten Hoeger (choeger) wrote :
Revision history for this message
Justin Payne (neolithium82) wrote :

Setting as incomplete for the time being. Sun Java 5 is available in the default repositories, though Sun Java 6 has been backported to Ubuntu 6.06 (Dapper). With the backport it may not be a wishlist, more along the lines of a support issue so that users know where to look for the newer version.

Justin

Changed in sun-java5:
assignee: nobody → jbeerwart
status: New → Incomplete
Changed in sun-java5:
importance: Undecided → Medium
Revision history for this message
Carsten Hoeger (choeger) wrote :

So what exactly is it, what you want to say with your comment?

Revision history for this message
Justin Payne (neolithium82) wrote :

This initially is a wishlist, due to the request of a newer version of Java to be installed on Ubuntu 6.06; with the backporting of Sun Java 6 to the LTS Release, it would seem to make this more completed than anything else. With that being said, and a newer version being available for all LTS Users, I'll close this bug out today.

Regards,
Justin

Revision history for this message
Torsten Spindler (tspindler) wrote :

The wish is for a more recent Java 5, not Java 6.

Revision history for this message
Carsten Hoeger (choeger) wrote :

Java 1.5 != Java 6

Replacing Java 1.5 with Java 6 does NOT solve the issue.

We - and I assume many others - did not yet certify our application against Java 6. It might not even work (well, that's unlikely, but hey, you know murphy).

Changed in sun-java5:
assignee: jbeerwart → nobody
importance: Medium → Wishlist
Revision history for this message
Torsten Spindler (tspindler) wrote :

Will 1.5.0_12 also solve your problem or is _08 mandatory?

Revision history for this message
renestach (rene-stach) wrote :

Yes, everything >= 1.5.0_08 should help.

Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for sun-java5 (Ubuntu) because there has been no activity for 60 days.]

Revision history for this message
renestach (rene-stach) wrote :

How can a security issue expire?

Any news on an updated package?

Revision history for this message
Torsten Spindler (tspindler) wrote :

Currently no news on the update, sorry.

To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.