~ubuntu-branches/ubuntu/hardy/openjdk-6/hardy-security : changes

~ubuntu-branches/ubuntu/hardy/openjdk-6/hardy-security » Changes from revision 14

From Revision 14

Rev	Summary	Authors	Tags	Date
14	* Rebuilt for hardy * Rebuilt for hardy * debian/rules: relax fastjar version to the one in hardy.	Marc Deslauriers	6b18-1.8.3-0ubuntu1~8.04.2	13 years ago
13	Upload to hardy. Upload to hardy.	Matthias Klose	6b18-1.8.2-4ubuntu1~8.04.1	13 years ago
12	* openjdk-6-jre-headless: Provide java-virtual-machine for r... * openjdk-6-jre-headless: Provide java-virtual-machine for releases older than karmic. * Plugin and netx fixes.	Matthias Klose	6b18-1.8.1-0ubuntu1~8.04.3	13 years ago
11	debian/control: adjust fastjar requirements for Hardy build. debian/control: adjust fastjar requirements for Hardy build.	Kees Cook	6b18-1.8.1-0ubuntu1~8.04.2	13 years ago
10	* SECURITY UPDATE: multiple upstream vulnerabilities. Upstre... * SECURITY UPDATE: multiple upstream vulnerabilities. Upstream fixes: - 6626217: Loader-constraint table allows arrays instead of only the base-classes. - 6633872: Policy/PolicyFile leak dynamic ProtectionDomains. - 6639665: ThreadGroup finalizer allows creation of false root ThreadGroups. - 6736390: File TOCTOU deserialization vulnerability. - 6745393: Inflater/Deflater clone issues. - 6887703: Unsigned applet can retrieve the dragged information before drop action occur. - 6888149: AtomicReferenceArray causes SIGSEGV -> SEGV_MAPERR error. - 6892265: System.arraycopy unable to reference elements beyond Integer.MAX_VALUE bytes. - 6893947: Deserialization of RMIConnectionImpl objects should enforce stricter checks [ZDI-CAN-588]. - 6893954: Subclasses of InetAddress may incorrectly interpret network addresses [ZDI-CAN-603]. - 6894807: No ClassCastException for HashAttributeSet constructors if run with -Xcomp. - 6898622: ObjectIdentifer.equals is not capable of detecting incorrectly encoded CommonName OIDs. - 6898739: TLS renegotiation issue. - 6899653: Java Runtime CMM readMabCurveData Buffer Overflow Vulnerability. - 6902299: Java JAR "unpack200" must verify input parameters. - 6904691: Java Applet Trusted Methods Chaining Privilege Escalation Vulnerability. - 6909597: Java Runtime Environment JPEGImageReader stepX Integer Overflow Vulnerability. - 6910590: Application can modify command array, in ProcessBuilder. - 6914823: Java AWT Library Invalid Index Vulnerability. - 6914866: JRE ImagingLib arbitrary code execution vulnerability. - 6932480: Crash in CompilerThread/Parser.	Matthias Klose	6b11-2ubuntu2.2	14 years ago
9	* SECURITY UPDATE: multiple upstream vulnerabilities. * SECURITY UPDATE: multiple upstream vulnerabilities. - upstream fixes, thanks to Bernhard R. Link: - patches/icedtea-4486841.patch fixes CVE-2008-5351: UTF-8 decoder accepts non-shortest form sequences, - patches/icedtea-6484091.patch fixes CVE-2008-5350: allows to list files within the user home directory, - patches/icedtea-6497740.patch fixes CVE-2008-5349: RSA public key length denial-of-service, - patches/icedtea-6588160.patch fixes CVE-2008-5348: Denial-Of-Service in kerberos authentication, - patches/icedtea-6592792.patch fixes CVE-2008-5347: applet privilege escalation via JAX package access, - patches/icedtea-6721753.patch fixes CVE-2008-5360: temporary files have guessable file names, - patches/icedtea-6726779.patch fixes CVE-2008-5359: Buffer overflow in image processing, - patches/icedtea-6733959.patch fixes CVE-2008-5354: Privilege escalation in command line applications, - patches/icedtea-6734167.patch fixes CVE-2008-5353: calender object deserialization allows privilege escalation, - patches/icedtea-6755943.patch fixes CVE-2008-5352: Jar200 Decompression buffer overflow, - patches/icedtea-6766136.patch fixes CVE-2008-5358: Buffer Overflow in GIF image processing. * add debian/patches/donotdelete.diff: fix MultipleJRE.sh to remove the link in the error-path, otherwise the test-suite removes the whole build/*/j2sdk-image directory on error.	Kees Cook	6b11-2ubuntu2.1	15 years ago
8	* New code drop (b08). * New code drop (b08). * Update IcedTea build infrastructure. * Move binfmt-support references from -jre to -jre-headless package. * Don't fail on purge, if /var/lib/binfmts/openjdk-6 is missing. LP: #206721. * Only use the basename for icons in desktop files. LP: #207413. * Install javaws(1). LP: #191297. * Install a wrapper script for javaws, which calls `javaws -viewer' if no arguments are given (or else starting javaws from the desktop menu would not do anything). * debian/JB-web-start.applications.in: Remove the -viewer option from command.	Matthias Klose	6b08-0ubuntu1	16 years ago
7	* New code drop (b07). * New code drop (b07). * Update IcedTea build infrastructure. * debian/copyright: Update to OpenJDK Trademark Notice v1.1.	Matthias Klose	6b07-0ubuntu1	16 years ago
6	* Update icon locations in menu files. * Update icon locations in menu files. * openjdk-6-jre-headless: Provide java-virtual-machine. LP: #189953. * openjdk-6-jre-headless: Add a conflict to gcjwebplugin; for openjdk use the icetea-gcjwebplugin, for gij the java-gcj-compat-plugin.	Matthias Klose	6b06-0ubuntu12	16 years ago
5	* Update IcedTea to 20080319. * Update IcedTea to 20080319. * Move rt.jar into the openjdk-6-jre-headless package; sun/awt/X11 class files differ between amd64 and i386. * Install all desktop files in /usr/share/applications.	Matthias Klose	6b06-0ubuntu11	16 years ago
4	* Remove print-lsb-release.patch, forwarded to IcedTea. * Remove print-lsb-release.patch, forwarded to IcedTea. * Fix IcedTea configure to detect libffi without pkg-config.	Matthias Klose	6b06-0ubuntu10	16 years ago
3	* Build-depend on libffi4-dev on architectures other than am... * Build-depend on libffi4-dev on architectures other than amd64, i386, lpia. * Install icons in /usr/share/pixmaps, not /usr/share/icons. * debian/rules: Call dh_icons.	Matthias Klose	6b06-0ubuntu9	16 years ago
2	* Tighten dependency on java-common. * Tighten dependency on java-common. * debian/copyright: Include trademark notice. * debian/control: Mention IcedTea in the package descriptions. * Update IcedTea to 20080311.	Matthias Klose	6b06-0ubuntu8	16 years ago
1	Import upstream version 6b06 Import upstream version 6b06	Matthias Klose	upstream-6b06	16 years ago