[pkg-java] r12255 - trunk/sun-java6/debian
Torsten Werner
twerner at alioth.debian.org
Sun May 2 10:54:31 UTC 2010
Author: twerner
Date: 2010-05-02 10:54:20 +0000 (Sun, 02 May 2010)
New Revision: 12255
Modified:
trunk/sun-java6/debian/changelog
Log:
* Add missing changelog entry for CVE-2010-0087 to version 6.19-0ubuntu1.
* Add missing changelog entry for CVE-2010-1423 to version 6.20-1.
- (CVE-2010-1423): Vulnerability in desktop Java
- (CVE-2010-0087): Unspecified vulnerability in the Java Web Start, Java
Plug-in component allows remote attackers to affect confidentiality,
integrity, and availability via unknown vectors.
Modified: trunk/sun-java6/debian/changelog
===================================================================
--- trunk/sun-java6/debian/changelog 2010-05-02 10:15:23 UTC (rev 12254)
+++ trunk/sun-java6/debian/changelog 2010-05-02 10:54:20 UTC (rev 12255)
@@ -6,6 +6,8 @@
* Add a some information to README.Debian that explains how to enable the
plugin in Iceweasel. (Closes: #541154)
* Add myself to Uploaders.
+ * Add missing changelog entry for CVE-2010-0087 to version 6.19-0ubuntu1.
+ * Add missing changelog entry for CVE-2010-1423 to version 6.20-1.
-- Torsten Werner <twerner at debian.org> Sun, 02 May 2010 12:07:16 +0200
@@ -37,6 +39,7 @@
* SECURITY UPDATE: multiple upstream vulnerabilities. Upstream fixes:
- (CVE-2010-0886): Vulnerability in desktop Java
- (CVE-2010-0887): Vulnerability in desktop Java
+ - (CVE-2010-1423): Vulnerability in desktop Java
-- Sylvestre Ledru <sylvestre at debian.org> Fri, 16 Apr 2010 16:54:12 +0200
@@ -73,6 +76,9 @@
- (CVE-2010-0095): Subclasses of InetAddress may incorrectly interpret
network addresses (6893954) [ZDI-CAN-603].
- (CVE-2010-0085): File TOCTOU deserialization vulnerability (6736390).
+ - (CVE-2010-0087): Unspecified vulnerability in the Java Web Start, Java
+ Plug-in component allows remote attackers to affect confidentiality,
+ integrity, and availability via unknown vectors.
- (CVE-2010-0091): Unsigned applet can retrieve the dragged information
before drop action occurs (6887703).
- (CVE-2010-0088): Inflater/Deflater clone issues (6745393).
More information about the pkg-java-commits
mailing list