[ubuntu/lucid-security] openjdk-6b18 6b18-1.8.8-0ubuntu1~10.04.1 (Accepted)

[Steve Beattie]

openjdk-6b18 (6b18-1.8.8-0ubuntu1~10.04.1) lucid-security; urgency=low

  * SECURITY UPDATE: IcedTea6 1.8.8 release.
    - S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent
      disabled get still selected for read ops (win)
    - S6618658, CVE-2011-0865: Vulnerability in deserialization
    - S7012520, CVE-2011-0815: Heap overflow vulnerability in
      FileDialog.show()
    - S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D code
    - S7013969, CVE-2011-0867: NetworkInterface.toString can reveal
      bindings
    - S7013971, CVE-2011-0869: Vulnerability in SAAJ
    - S7016340, CVE-2011-0870: Vulnerability in SAAJ
    - S7016495, CVE-2011-0868: Crash in Java 2D transforming an image with
      scale close to zero
    - S7020198, CVE-2011-0871: ImageIcon creates Component with null acc
    - S7020373, CVE-2011-0864: JSR rewriting can overflow memory address
      size variables
  * Backport CACAO updates from the 6-1.10 branch.
  * debian/generate_debian_orig.sh: adjust settings to match the
    generation of this update.
  * debian/rules: debian/patches/hotspot-fix_added_define.patch;
    applied upstream

Date: Sat, 11 Jun 2011 08:30:25 -0700
Changed-By: Steve Beattie <sbeattie at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/lucid/+source/openjdk-6b18/6b18-1.8.8-0ubuntu1~10.04.1
-------------- next part --------------
Format: 1.8
Date: Sat, 11 Jun 2011 08:30:25 -0700
Source: openjdk-6b18
Binary: openjdk-6-jdk openjdk-6-jre-headless openjdk-6-jre openjdk-6-demo openjdk-6-dbg icedtea6-plugin icedtea-6-jre-cacao openjdk-6-jre-zero
Architecture: source
Version: 6b18-1.8.8-0ubuntu1~10.04.1
Distribution: lucid-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Steve Beattie <sbeattie at ubuntu.com>
Description: 
 icedtea-6-jre-cacao - Alternative JVM for OpenJDK, using Cacao
 icedtea6-plugin - web browser plugin based on OpenJDK and IcedTea to execute Java a
 openjdk-6-dbg - Java runtime based on OpenJDK (debugging symbols)
 openjdk-6-demo - Java runtime based on OpenJDK (demos and examples)
 openjdk-6-jdk - OpenJDK Development Kit (JDK)
 openjdk-6-jre - OpenJDK Java runtime, using ${vm:Name}
 openjdk-6-jre-headless - OpenJDK Java runtime, using ${vm:Name} (headless)
 openjdk-6-jre-zero - Alternative JVM for OpenJDK, using Zero/Shark
Changes: 
 openjdk-6b18 (6b18-1.8.8-0ubuntu1~10.04.1) lucid-security; urgency=low
 .
   * SECURITY UPDATE: IcedTea6 1.8.8 release.
     - S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent
       disabled get still selected for read ops (win)
     - S6618658, CVE-2011-0865: Vulnerability in deserialization
     - S7012520, CVE-2011-0815: Heap overflow vulnerability in
       FileDialog.show()
     - S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D code
     - S7013969, CVE-2011-0867: NetworkInterface.toString can reveal
       bindings
     - S7013971, CVE-2011-0869: Vulnerability in SAAJ
     - S7016340, CVE-2011-0870: Vulnerability in SAAJ
     - S7016495, CVE-2011-0868: Crash in Java 2D transforming an image with
       scale close to zero
     - S7020198, CVE-2011-0871: ImageIcon creates Component with null acc
     - S7020373, CVE-2011-0864: JSR rewriting can overflow memory address
       size variables
   * Backport CACAO updates from the 6-1.10 branch.
   * debian/generate_debian_orig.sh: adjust settings to match the
     generation of this update.
   * debian/rules: debian/patches/hotspot-fix_added_define.patch;
     applied upstream
Checksums-Sha1: 
 bae2146dbc3608a3d6ebe484fdfbbd3193b34709 3141 openjdk-6b18_6b18-1.8.8-0ubuntu1~10.04.1.dsc
 9cfdb9cb92ce0e3d9b7062fc563b83c718643c80 73074039 openjdk-6b18_6b18-1.8.8.orig.tar.gz
 622865e38d0ebf36ac08a4151935070c05945b41 134758 openjdk-6b18_6b18-1.8.8-0ubuntu1~10.04.1.diff.gz
Checksums-Sha256: 
 7126bea946a13765955bd2472396c46341e3a02a02842886371425df9ac3db69 3141 openjdk-6b18_6b18-1.8.8-0ubuntu1~10.04.1.dsc
 f378324110efe6619d8f00938939b2716b35652b0d1d02573c2a73e251bd5513 73074039 openjdk-6b18_6b18-1.8.8.orig.tar.gz
 a76326506eca31cdee16528d031b23caacda32e584678ca2bf52c56632d84dd3 134758 openjdk-6b18_6b18-1.8.8-0ubuntu1~10.04.1.diff.gz
Files: 
 b50c7adf5c646de29012e9bb21b40d37 3141 java optional openjdk-6b18_6b18-1.8.8-0ubuntu1~10.04.1.dsc
 7450170dd5927d46ce7c5f87b37a17a5 73074039 java optional openjdk-6b18_6b18-1.8.8.orig.tar.gz
 3a42fb531960dd6ddc21247cdd2250d2 134758 java optional openjdk-6b18_6b18-1.8.8-0ubuntu1~10.04.1.diff.gz
Original-Maintainer: OpenJDK Team <openjdk at lists.launchpad.net>