[pkg-java] r13779 - trunk/sun-java6/debian

Sylvestre Ledru sylvestre at alioth.debian.org
Thu Jun 9 09:54:35 UTC 2011


Author: sylvestre
Date: 2011-06-09 09:54:35 +0000 (Thu, 09 Jun 2011)
New Revision: 13779

Modified:
   trunk/sun-java6/debian/changelog
   trunk/sun-java6/debian/rules
Log:
sun-java6 (6.26-1) unstable; urgency=high

  * New upstream release (Closes: #629852)


Modified: trunk/sun-java6/debian/changelog
===================================================================
--- trunk/sun-java6/debian/changelog	2011-06-09 08:45:26 UTC (rev 13778)
+++ trunk/sun-java6/debian/changelog	2011-06-09 09:54:35 UTC (rev 13779)
@@ -1,3 +1,38 @@
+sun-java6 (6.26-1) unstable; urgency=high
+
+  * New upstream release (Closes: #629852)
+  * SECURITY UPDATE: multiple upstream vulnerabilities. Upstream fixes:
+    - (CVE-2011-0862): integer overflows in JPEGImageReader and font
+                       SunLayoutEngine (2D, 7013519) 
+    - (CVE-2011-0873): unspecified vulnerability fixed in 6u26 (2D) 
+    - (CVE-2011-0815): FileDialog.show() buffer overflow (AWT, 7012520) 
+    - (CVE-2011-0817): unspecified vulnerabilities fixed in 6u26 (Deployment,
+                       JRE) 
+    - (CVE-2011-0863): unspecified vulnerability fixed in 6u26 (Deployment) 
+    - (CVE-2011-0864): JVM memory corruption via certain bytecode (HotSpot,
+                       7020373) 
+    - (CVE-2011-0802): unspecified vulnerabilities fixed in 6u26 (Sound) 
+    - (CVE-2011-0814): unspecified vulnerabilities fixed in 6u26 (Sound) 
+    - (CVE-2011-0871): MediaTracker created Component instances with
+                       unnecessary privileges (Swing, 7020198) 
+    - (CVE-2011-0786): unspecified vulnerabilities fixed in 6u26 (Deployment,
+                       JRE) 
+    - (CVE-2011-0788): unspecified vulnerabilities fixed in 6u26 (Deployment,
+                       JRE) 
+    - (CVE-2011-0866): unspecified vulnerabilities fixed in 6u26 (Deployment,
+                       JRE) 
+    - (CVE-2011-0868): incorrect numeric type conversion in TransformHelper
+                       (2D, 7016495) 
+    - (CVE-2011-0872): non-blocking sockets incorrectly selected for reading
+                       (NIO, 6213702) 
+    - (CVE-2011-0867): NetworkInterface information leak (Networking, 7013969) 
+    - (CVE-2011-0869): unprivileged proxy settings change via SOAPConnection
+                       (SAAJ, 7013971) 
+    - (CVE-2011-0865): Deserialization allows creation of mutable SignedObject
+                       (Deserialization, 6618658) 
+
+ -- Sylvestre Ledru <sylvestre at debian.org>  Thu, 09 Jun 2011 10:20:23 +0200
+
 sun-java6 (6.25-3) unstable; urgency=low
 
   * For now, revert changes of upload 6.25-2 due to license reasons. 

Modified: trunk/sun-java6/debian/rules
===================================================================
--- trunk/sun-java6/debian/rules	2011-06-09 08:45:26 UTC (rev 13778)
+++ trunk/sun-java6/debian/rules	2011-06-09 09:54:35 UTC (rev 13779)
@@ -315,8 +315,8 @@
 	  exit 1; \
 	fi
 
-diff_ignore = -I 'Thursday, April 1' \
-	-I 'Thu Apr 1' -I '^ *// java GenerateCharacter'
+diff_ignore = -I 'Wednesday, May 4' \
+	-I 'Wed May 04' -I '^ *// java GenerateCharacter'
 
 with_check = yes
 




More information about the pkg-java-commits mailing list