~ubuntu-branches/ubuntu/natty/icedtea-web/natty-updates

Viewing all changes in revision 24.

  • Committer: Package Import Robot
  • Author(s): Steve Beattie
  • Date: 2012-07-28 19:30:09 UTC
  • mfrom: (19.1.4 natty-security)
  • Revision ID: package-import@ubuntu.com-20120728193009-zcmbosnyj2paykr9
Tags: 1.2-2ubuntu0.11.04.2
* SECURITY UPDATE: uninitialized pointer use flaw
  - debian/patches/icedtea-web-CVE-2012-3422.patch: check for empty
    instance_to_id_map hash and return error if so.
  - CVE-2012-3422
* SECURITY UPDATE: incorrect handling of non NULL terminated strings
  - debian/patches/icedtea-web-CVE-2012-3423.patch: ensure NPVariant
    NPStrings are NULL terminated.
  - CVE-2012-3423

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: