[ubuntu/maverick-security] openjdk-6b18 6b18-1.8.8-0ubuntu1~10.10.2+1.8.9 (Accepted)

[Steve Beattie]

openjdk-6b18 (6b18-1.8.8-0ubuntu1~10.10.2+1.8.9) maverick-security; urgency=low

  * SECURITY UPDATE: information disclosure
    - IcedTea 1.8.9 release:
      + debian/patches/cache-directory-exposed-it6-1.9.patch: don't
        allow unsigned web start applications/applets determine the
        location of the netx cache directory
      + CVE-2011-2513
      + applied inline due to no natty update (icedtea-web is
        separate there)
  * netx/net/sourceforge/jnlp/runtime/CachedJarFileCallback.java:
    remove Override attributes per
    http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=764

Date: Mon, 25 Jul 2011 17:44:43 -0700
Changed-By: Steve Beattie <sbeattie at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/maverick/+source/openjdk-6b18/6b18-1.8.8-0ubuntu1~10.10.2+1.8.9
-------------- next part --------------
Format: 1.8
Date: Mon, 25 Jul 2011 17:44:43 -0700
Source: openjdk-6b18
Binary: openjdk-6-jdk openjdk-6-jre-headless openjdk-6-jre openjdk-6-demo openjdk-6-dbg icedtea6-plugin icedtea-6-jre-cacao openjdk-6-jre-zero
Architecture: source
Version: 6b18-1.8.8-0ubuntu1~10.10.2+1.8.9
Distribution: maverick-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Steve Beattie <sbeattie at ubuntu.com>
Description: 
 icedtea-6-jre-cacao - Alternative JVM for OpenJDK, using Cacao
 icedtea6-plugin - web browser plugin based on OpenJDK and IcedTea to execute Java a
 openjdk-6-dbg - Java runtime based on OpenJDK (debugging symbols)
 openjdk-6-demo - Java runtime based on OpenJDK (demos and examples)
 openjdk-6-jdk - OpenJDK Development Kit (JDK)
 openjdk-6-jre - OpenJDK Java runtime, using ${vm:Name}
 openjdk-6-jre-headless - OpenJDK Java runtime, using ${vm:Name} (headless)
 openjdk-6-jre-zero - Alternative JVM for OpenJDK, using Zero/Shark
Changes: 
 openjdk-6b18 (6b18-1.8.8-0ubuntu1~10.10.2+1.8.9) maverick-security; urgency=low
 .
   * SECURITY UPDATE: information disclosure
     - IcedTea 1.8.9 release:
       + debian/patches/cache-directory-exposed-it6-1.9.patch: don't
         allow unsigned web start applications/applets determine the
         location of the netx cache directory
       + CVE-2011-2513
       + applied inline due to no natty update (icedtea-web is
         separate there)
   * netx/net/sourceforge/jnlp/runtime/CachedJarFileCallback.java:
     remove Override attributes per
     http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=764
Checksums-Sha1: 
 0e1e32855eac0102d2a9b445ec58722e7f052fc0 3142 openjdk-6b18_6b18-1.8.8-0ubuntu1~10.10.2+1.8.9.dsc
 781cfa6cd69b8b7e5b2e080d63bf39d0cd5d7619 156196 openjdk-6b18_6b18-1.8.8-0ubuntu1~10.10.2+1.8.9.diff.gz
Checksums-Sha256: 
 87cf0aabff506103bd2348e434d13ba73982bfa4828d402456caa87f27548b3e 3142 openjdk-6b18_6b18-1.8.8-0ubuntu1~10.10.2+1.8.9.dsc
 1055f1fae67446fc8e71c341f000c18f6bde2c0ba92d628c30b24b3a1ef1982e 156196 openjdk-6b18_6b18-1.8.8-0ubuntu1~10.10.2+1.8.9.diff.gz
Files: 
 ba90c05906f8992d40f9c8d88205d05c 3142 java optional openjdk-6b18_6b18-1.8.8-0ubuntu1~10.10.2+1.8.9.dsc
 7412cb51511c44b4ed27c7a0aa0003da 156196 java optional openjdk-6b18_6b18-1.8.8-0ubuntu1~10.10.2+1.8.9.diff.gz
Original-Maintainer: OpenJDK Team <openjdk at lists.launchpad.net>