openjdk-6 6b11-2ubuntu2.1 source package in Ubuntu
Changelog
openjdk-6 (6b11-2ubuntu2.1) hardy-security; urgency=low
* SECURITY UPDATE: multiple upstream vulnerabilities.
- upstream fixes, thanks to Bernhard R. Link:
- patches/icedtea-4486841.patch fixes CVE-2008-5351:
UTF-8 decoder accepts non-shortest form sequences,
- patches/icedtea-6484091.patch fixes CVE-2008-5350:
allows to list files within the user home directory,
- patches/icedtea-6497740.patch fixes CVE-2008-5349:
RSA public key length denial-of-service,
- patches/icedtea-6588160.patch fixes CVE-2008-5348:
Denial-Of-Service in kerberos authentication,
- patches/icedtea-6592792.patch fixes CVE-2008-5347:
applet privilege escalation via JAX package access,
- patches/icedtea-6721753.patch fixes CVE-2008-5360:
temporary files have guessable file names,
- patches/icedtea-6726779.patch fixes CVE-2008-5359:
Buffer overflow in image processing,
- patches/icedtea-6733959.patch fixes CVE-2008-5354:
Privilege escalation in command line applications,
- patches/icedtea-6734167.patch fixes CVE-2008-5353:
calender object deserialization allows privilege escalation,
- patches/icedtea-6755943.patch fixes CVE-2008-5352:
Jar200 Decompression buffer overflow,
- patches/icedtea-6766136.patch fixes CVE-2008-5358:
Buffer Overflow in GIF image processing.
* add debian/patches/donotdelete.diff:
fix MultipleJRE.sh to remove the link in the error-path, otherwise
the test-suite removes the whole build/*/j2sdk-image directory on error.
-- Kees Cook <email address hidden> Thu, 29 Jan 2009 12:20:52 -0800
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| openjdk-6_6b11.orig.tar.gz | 49.3 MiB | a51c77f5594c0d28979d78887f83d28fb56f84202b6903677402e81ee1898051 |
| openjdk-6_6b11-2ubuntu2.1.diff.gz | 141.0 KiB | bc44ec2eda8d37d4139c032423bc343848feffc06bb474bd59099c586f750de5 |
| openjdk-6_6b11-2ubuntu2.1.dsc | 1.8 KiB | dd89e00f66bcab9123abb49360501437f8edf90a029968230a080a4880fc65ad |
Available diffs
Binary packages built by this source
- openjdk-6-dbg: No summary available for openjdk-6-dbg in ubuntu hardy.
No description available for openjdk-6-dbg in ubuntu hardy.
- openjdk-6-demo: No summary available for openjdk-6-demo in ubuntu hardy.
No description available for openjdk-6-demo in ubuntu hardy.
- openjdk-6-doc: No summary available for openjdk-6-doc in ubuntu hardy.
No description available for openjdk-6-doc in ubuntu hardy.
- openjdk-6-jdk: No summary available for openjdk-6-jdk in ubuntu hardy.
No description available for openjdk-6-jdk in ubuntu hardy.
- openjdk-6-jre: No summary available for openjdk-6-jre in ubuntu hardy.
No description available for openjdk-6-jre in ubuntu hardy.
- openjdk-6-jre-headless: No summary available for openjdk-6-jre-headless in ubuntu hardy.
No description available for openjdk-
6-jre-headless in ubuntu hardy.
- openjdk-6-jre-lib: No summary available for openjdk-6-jre-lib in ubuntu hardy.
No description available for openjdk-6-jre-lib in ubuntu hardy.
- openjdk-6-source: No summary available for openjdk-6-source in ubuntu hardy.
No description available for openjdk-6-source in ubuntu hardy.
