[ubuntu/lucid-security] openjdk-6b18 6b18-1.8.8-0ubuntu1~10.04.2+1.8.9 (Accepted)

[Steve Beattie]

openjdk-6b18 (6b18-1.8.8-0ubuntu1~10.04.2+1.8.9) lucid-security; urgency=low

  * SECURITY UPDATE: information disclosure
    - IcedTea 1.8.9 release:
      + debian/patches/cache-directory-exposed-it6-1.9.patch: don't
        allow unsigned web start applications/applets determine the
        location of the netx cache directory
      + CVE-2011-2513
      + applied inline due to no natty update (icedtea-web is
        separate there)
  * netx/net/sourceforge/jnlp/runtime/CachedJarFileCallback.java:
    remove Override attributes per
    http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=764

Date: Mon, 25 Jul 2011 21:00:13 -0700
Changed-By: Steve Beattie <sbeattie at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/lucid/+source/openjdk-6b18/6b18-1.8.8-0ubuntu1~10.04.2+1.8.9
-------------- next part --------------
Format: 1.8
Date: Mon, 25 Jul 2011 21:00:13 -0700
Source: openjdk-6b18
Binary: openjdk-6-jdk openjdk-6-jre-headless openjdk-6-jre openjdk-6-demo openjdk-6-dbg icedtea6-plugin icedtea-6-jre-cacao openjdk-6-jre-zero
Architecture: source
Version: 6b18-1.8.8-0ubuntu1~10.04.2+1.8.9
Distribution: lucid-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Steve Beattie <sbeattie at ubuntu.com>
Description: 
 icedtea-6-jre-cacao - Alternative JVM for OpenJDK, using Cacao
 icedtea6-plugin - web browser plugin based on OpenJDK and IcedTea to execute Java a
 openjdk-6-dbg - Java runtime based on OpenJDK (debugging symbols)
 openjdk-6-demo - Java runtime based on OpenJDK (demos and examples)
 openjdk-6-jdk - OpenJDK Development Kit (JDK)
 openjdk-6-jre - OpenJDK Java runtime, using ${vm:Name}
 openjdk-6-jre-headless - OpenJDK Java runtime, using ${vm:Name} (headless)
 openjdk-6-jre-zero - Alternative JVM for OpenJDK, using Zero/Shark
Changes: 
 openjdk-6b18 (6b18-1.8.8-0ubuntu1~10.04.2+1.8.9) lucid-security; urgency=low
 .
   * SECURITY UPDATE: information disclosure
     - IcedTea 1.8.9 release:
       + debian/patches/cache-directory-exposed-it6-1.9.patch: don't
         allow unsigned web start applications/applets determine the
         location of the netx cache directory
       + CVE-2011-2513
       + applied inline due to no natty update (icedtea-web is
         separate there)
   * netx/net/sourceforge/jnlp/runtime/CachedJarFileCallback.java:
     remove Override attributes per
     http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=764
Checksums-Sha1: 
 106fba859c06f960d0be9e86b94d867c66b10bd6 3165 openjdk-6b18_6b18-1.8.8-0ubuntu1~10.04.2+1.8.9.dsc
 f021edacf4a910f31d6bdc2563e336e8e0f3d9d7 152698 openjdk-6b18_6b18-1.8.8-0ubuntu1~10.04.2+1.8.9.diff.gz
Checksums-Sha256: 
 20d000ce2d1d3295baedf4ddf73d844339e907510d473bad31ca37f9799d2df5 3165 openjdk-6b18_6b18-1.8.8-0ubuntu1~10.04.2+1.8.9.dsc
 6217f234f22a581903f6758b2c835124a069dcd41534cbd74f35eab01ebf1ab4 152698 openjdk-6b18_6b18-1.8.8-0ubuntu1~10.04.2+1.8.9.diff.gz
Files: 
 10fcf46de3ef355c5363cc2bb299b679 3165 java optional openjdk-6b18_6b18-1.8.8-0ubuntu1~10.04.2+1.8.9.dsc
 7b2ae54d54e6bea2fa43bc643d13bb58 152698 java optional openjdk-6b18_6b18-1.8.8-0ubuntu1~10.04.2+1.8.9.diff.gz
Original-Maintainer: OpenJDK Team <openjdk at lists.launchpad.net>