~ubuntu-branches/ubuntu/oneiric/icedtea-web/oneiric-security

Viewing all changes in revision 31.

  • Committer: Package Import Robot
  • Author(s): Steve Beattie
  • Date: 2012-07-28 18:58:28 UTC
  • Revision ID: package-import@ubuntu.com-20120728185828-ovspn1hzsz1ezu76
Tags: 1.2-2ubuntu0.11.10.2
* SECURITY UPDATE: uninitialized pointer use flaw
  - debian/patches/icedtea-web-CVE-2012-3422.patch: check for empty
    instance_to_id_map hash and return error if so.
  - CVE-2012-3422
* SECURITY UPDATE: incorrect handling of non NULL terminated strings
  - debian/patches/icedtea-web-CVE-2012-3423.patch: ensure NPVariant
    NPStrings are NULL terminated.
  - CVE-2012-3423

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: