[sun-java] security update available from upstream

[disabled.user]

Binary package hint: sun-java6-jre

Sun provides updated java packages which "contains fixes for one or more security vulnerabilities".

References:
http://java.sun.com/javase/6/webnotes/ReleaseNotes.html#160_05

[James Stansell (jamesstansell)]

For reference, Sun posted additional information here:

  http://blogs.sun.com/security/entry/advance_notification_of_security_updates1

-jim.

[Matthias Klose (doko)]

no, they are not: https://jdk-distros.dev.java.net/

[Alex Mayorga (alex-mayorga)]

Matthias,

They might be still working on the distro distributable version then. The Linux installer for 6.0 update 5 is already available from http://java.sun.com/javase/downloads/index.jsp
I've added the CVE # to this bug and here's a link to US-CERT that summarizes the vulnerabilities http://www.us-cert.gov/cas/techalerts/TA08-066A.html

I'd like to get involved in the whole Java in Ubuntu thing so please drop me a line if you need help or anything.

[Alex Mayorga (alex-mayorga)]

Sun advises to migrate to JDK and JRE 5.0 Update 15 or later

[Alex Mayorga (alex-mayorga)]

Sun advises to migrate to JDK and JRE 6 Update 5 or later

[Launchpad Janitor (janitor)]

This bug was fixed in the package sun-java5 - 1.5.0-15-0ubuntu1

---------------
sun-java5 (1.5.0-15-0ubuntu1) hardy; urgency=low

  * New upstream bug fix release.
    This was released today on https://jdk-distros.dev.java.net/developer.html.
    Distributions are not allowed to package the released versions published
    at http://java.sun.com/javase/downloads and have to wait for the
    availability of the DLJ bundles. No need to file reports like LP: #199477.
  * Install all desktop files in /usr/share/applications.
  * sun-java5-jdk: Add java*-sdk provides.
  * Adjust plugin links for xulrunner-1.9.

 -- Matthias Klose <email address hidden> Wed, 26 Mar 2008 00:20:09 +0000

[Launchpad Janitor (janitor)]

This bug was fixed in the package sun-java6 - 6-05-0ubuntu1

---------------
sun-java6 (6-05-0ubuntu1) hardy; urgency=low

  * New upstream bug fix release.
    This was released today on https://jdk-distros.dev.java.net/developer.html.
    Distributions are not allowed to package the released versions published
    at http://java.sun.com/javase/downloads and have to wait for the
    availability of the DLJ bundles. No need to file reports like LP: #199477.
  * Install all desktop files in /usr/share/applications.
  * sun-java6-jdk: Add java*-sdk provides.
  * Adjust plugin links for xulrunner-1.9. LP: #173966, #198633.

 -- Matthias Klose <email address hidden> Tue, 25 Mar 2008 23:33:13 +0000

[disabled.user (disabled.user-deactivatedaccount)]

Won't there be security upgrades for the stable releases? Gutsy's sun-java6 is still at 6-03-0ubuntu2.