Ubuntu
openjdk-8 package

IcedTeaPlugin.so reference should be removed from .java-1.8.0-openjdk-amd64.jinfo

Bug #2016396 reported by L W R
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
openjdk-8 (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

IcedTeaPlugin.so has been removed from icedtea-8-plugin because the NPAPI support in browsers has been removed. Therefore, the openjdk-8-jre-headless package should remove the reference to IcedTeaPlugin.so in .java-1.8.0-openjdk-amd64.jinfo because it causes an error to be thrown when switching between java versions when using update-java-alternatives. This affects all versions of ubuntu using the openjdk-8-jre-headless package.

Example:
update-alternatives: error: no alternatives for mozilla-javaplugin.so
update-java-alternatives: plugin alternative does not exist: /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/IcedTeaPlugin.so

Fix:
--- a/usr/lib/jvm/.java-1.8.0-openjdk-amd64.jinfo 2023-01-24 20:02:58.000000000 +0100
+++ b/usr/lib/jvm/.java-1.8.0-openjdk-amd64.jinfo 2023-04-16 00:04:20.547250688 +0200
@@ -47,4 +47,3 @@
 jdkhl jcmd /usr/lib/jvm/java-8-openjdk-amd64/bin/jcmd
 jdk appletviewer /usr/lib/jvm/java-8-openjdk-amd64/bin/appletviewer
 jdk jconsole /usr/lib/jvm/java-8-openjdk-amd64/bin/jconsole
-plugin mozilla-javaplugin.so /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/IcedTeaPlugin.so

Tags: fr-4144

Related branches

~vpa1977/ubuntu/+source/openjdk-8:02_security_release_exclude_icedtea
Graham Inggs: Pending requested
Matthias Klose: Pending requested
git-ubuntu import: Pending requested
Diff: 36 lines (+1/-6)
2 files modified
debian/changelog (+1/-0)
debian/rules (+0/-6)

CVE References

Vladimir Petko (vpa1977)
tags: added: fr-4144
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package openjdk-8 - 8u372-ga~us1-0ubuntu1~23.04

---------------
openjdk-8 (8u372-ga~us1-0ubuntu1~23.04) lunar-security; urgency=medium

  * Upload to Ubuntu 23.04.

openjdk-8 (8u372-ga~us1-0ubuntu1) mantic; urgency=medium

  * OpenJDK 8u372 release, build 7.
    - CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939,
      CVE-2023-21954, CVE-2023-21967, CVE-2023-21968.
    - Release notes:
      https://mail.openjdk.org/pipermail/jdk8u-dev/2023-April/017039.html
  * d/rules: remove IcedTeaPlugin.so reference (LP: #2016396).

 -- Vladimir Petko <email address hidden> Sat, 06 May 2023 12:55:35 +0200

Changed in openjdk-8 (Ubuntu):
status: New → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package openjdk-8 - 8u372-ga~us1-0ubuntu1~22.04

---------------
openjdk-8 (8u372-ga~us1-0ubuntu1~22.04) jammy-security; urgency=medium

  * Upload to Ubuntu 22.04.

openjdk-8 (8u372-ga~us1-0ubuntu1) mantic; urgency=medium

  * OpenJDK 8u372 release, build 7.
    - CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939,
      CVE-2023-21954, CVE-2023-21967, CVE-2023-21968.
    - Release notes:
      https://mail.openjdk.org/pipermail/jdk8u-dev/2023-April/017039.html
  * d/rules: remove IcedTeaPlugin.so reference (LP: #2016396).

 -- Vladimir Petko <email address hidden> Sat, 06 May 2023 12:53:54 +0200

Changed in openjdk-8 (Ubuntu):
status: New → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package openjdk-8 - 8u372-ga~us1-0ubuntu1~22.10

---------------
openjdk-8 (8u372-ga~us1-0ubuntu1~22.10) kinetic-security; urgency=medium

  * Upload to Ubuntu 22.10.

openjdk-8 (8u372-ga~us1-0ubuntu1) mantic; urgency=medium

  * OpenJDK 8u372 release, build 7.
    - CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939,
      CVE-2023-21954, CVE-2023-21967, CVE-2023-21968.
    - Release notes:
      https://mail.openjdk.org/pipermail/jdk8u-dev/2023-April/017039.html
  * d/rules: remove IcedTeaPlugin.so reference (LP: #2016396).

 -- Vladimir Petko <email address hidden> Sat, 06 May 2023 12:54:58 +0200

Changed in openjdk-8 (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.