[pkg-java] r13779 - trunk/sun-java6/debian
Sylvestre Ledru
sylvestre at alioth.debian.org
Thu Jun 9 09:54:35 UTC 2011
Author: sylvestre
Date: 2011-06-09 09:54:35 +0000 (Thu, 09 Jun 2011)
New Revision: 13779
Modified:
trunk/sun-java6/debian/changelog
trunk/sun-java6/debian/rules
Log:
sun-java6 (6.26-1) unstable; urgency=high
* New upstream release (Closes: #629852)
Modified: trunk/sun-java6/debian/changelog
===================================================================
--- trunk/sun-java6/debian/changelog 2011-06-09 08:45:26 UTC (rev 13778)
+++ trunk/sun-java6/debian/changelog 2011-06-09 09:54:35 UTC (rev 13779)
@@ -1,3 +1,38 @@
+sun-java6 (6.26-1) unstable; urgency=high
+
+ * New upstream release (Closes: #629852)
+ * SECURITY UPDATE: multiple upstream vulnerabilities. Upstream fixes:
+ - (CVE-2011-0862): integer overflows in JPEGImageReader and font
+ SunLayoutEngine (2D, 7013519)
+ - (CVE-2011-0873): unspecified vulnerability fixed in 6u26 (2D)
+ - (CVE-2011-0815): FileDialog.show() buffer overflow (AWT, 7012520)
+ - (CVE-2011-0817): unspecified vulnerabilities fixed in 6u26 (Deployment,
+ JRE)
+ - (CVE-2011-0863): unspecified vulnerability fixed in 6u26 (Deployment)
+ - (CVE-2011-0864): JVM memory corruption via certain bytecode (HotSpot,
+ 7020373)
+ - (CVE-2011-0802): unspecified vulnerabilities fixed in 6u26 (Sound)
+ - (CVE-2011-0814): unspecified vulnerabilities fixed in 6u26 (Sound)
+ - (CVE-2011-0871): MediaTracker created Component instances with
+ unnecessary privileges (Swing, 7020198)
+ - (CVE-2011-0786): unspecified vulnerabilities fixed in 6u26 (Deployment,
+ JRE)
+ - (CVE-2011-0788): unspecified vulnerabilities fixed in 6u26 (Deployment,
+ JRE)
+ - (CVE-2011-0866): unspecified vulnerabilities fixed in 6u26 (Deployment,
+ JRE)
+ - (CVE-2011-0868): incorrect numeric type conversion in TransformHelper
+ (2D, 7016495)
+ - (CVE-2011-0872): non-blocking sockets incorrectly selected for reading
+ (NIO, 6213702)
+ - (CVE-2011-0867): NetworkInterface information leak (Networking, 7013969)
+ - (CVE-2011-0869): unprivileged proxy settings change via SOAPConnection
+ (SAAJ, 7013971)
+ - (CVE-2011-0865): Deserialization allows creation of mutable SignedObject
+ (Deserialization, 6618658)
+
+ -- Sylvestre Ledru <sylvestre at debian.org> Thu, 09 Jun 2011 10:20:23 +0200
+
sun-java6 (6.25-3) unstable; urgency=low
* For now, revert changes of upload 6.25-2 due to license reasons.
Modified: trunk/sun-java6/debian/rules
===================================================================
--- trunk/sun-java6/debian/rules 2011-06-09 08:45:26 UTC (rev 13778)
+++ trunk/sun-java6/debian/rules 2011-06-09 09:54:35 UTC (rev 13779)
@@ -315,8 +315,8 @@
exit 1; \
fi
-diff_ignore = -I 'Thursday, April 1' \
- -I 'Thu Apr 1' -I '^ *// java GenerateCharacter'
+diff_ignore = -I 'Wednesday, May 4' \
+ -I 'Wed May 04' -I '^ *// java GenerateCharacter'
with_check = yes
More information about the pkg-java-commits
mailing list