icedtea-web 1.2-2ubuntu1.1 source package in Ubuntu

Changelog

icedtea-web (1.2-2ubuntu1.1) precise-security; urgency=low

  * SECURITY UPDATE: uninitialized pointer use flaw
    - debian/patches/icedtea-web-CVE-2012-3422.patch: check for empty
      instance_to_id_map hash and return error if so.
    - CVE-2012-3422
  * SECURITY UPDATE: incorrect handling of non NULL terminated strings
    - debian/patches/icedtea-web-CVE-2012-3423.patch: ensure NPVariant
      NPStrings are NULL terminated.
    - CVE-2012-3423
  * debian/control, debian/control.common: add replaces on icedtea-net
    and icedtea-6-plugin for conflicting files in older releases,
    caused by icedtea-web security pocket backport to those releases
    in conjunction with openjdk-6 security backport (LP: #1024708)
 -- Steve Beattie <email address hidden>   Fri, 27 Jul 2012 23:14:25 -0700

Upload details

Uploaded by:
Steve Beattie
Uploaded to:
Precise
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
java
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
icedtea-web_1.2.orig.tar.gz 865.0 KiB 3f8d22b655df207409dd3451ba02907f61a12ac051e4df4d44bb5ed47c4f778d
icedtea-web_1.2-2ubuntu1.1.debian.tar.gz 24.3 KiB a41cd5a9a25d22d9f96af063854cb1384251f9e7811397e37eb78b5df0ffe594
icedtea-web_1.2-2ubuntu1.1.dsc 2.4 KiB 22867e64bee9ad0f81b60502e70cc788f2aa2989bbc8e02aa1d206dfda2516b2

View changes file

Binary packages built by this source

icedtea-6-plugin: web browser plugin based on OpenJDK and IcedTea to execute Java applets

 IcedTeaPlugin is a web browser plugin to execute Java applets, supporting
 LiveConnect/JavaScript. It is targeted for xulrunner-1.9 and compatible
 browsers that support the NPAPI.

icedtea-7-plugin: web browser plugin based on OpenJDK and IcedTea to execute Java applets

 IcedTeaPlugin is a web browser plugin to execute Java applets, supporting
 LiveConnect/JavaScript. It is targeted for xulrunner-1.9 and compatible
 browsers that support the NPAPI.

icedtea-netx: NetX - implementation of the Java Network Launching Protocol (JNLP)

 NetX provides a drop-in replacement for javaws (Java Web Start). Since
 upstream NetX is dormant, IcedTea is hosting and modifying the sources
 in the IcedTea-Web directory.
 .
 IcedTea's NetX currently supports verification of signed jars, trusted
 certificate storing, system certificate store checking, and provides
 the services specified by the jnlp API.

icedtea-netx-common: NetX - implementation of the Java Network Launching Protocol (JNLP)

 NetX provides a drop-in replacement for javaws (Java Web Start). Since
 upstream NetX is dormant, IcedTea is hosting and modifying the sources
 in the IcedTea-Web directory.
 .
 This package contains the architecture independent files.

icedtea-plugin: web browser plugin to execute Java applets (dependency package)

 IcedTeaPlugin is a web browser plugin to execute Java applets, supporting
 LiveConnect/JavaScript. It is targeted for xulrunner-1.9 and compatible
 browsers that support the NPAPI.
 .
 This is a dependency package, it can be safely removed after upgrade.

icedtea6-plugin: web browser plugin to execute Java applets (dependency package)

 IcedTeaPlugin is a web browser plugin to execute Java applets, supporting
 LiveConnect/JavaScript. It is targeted for xulrunner-1.9 and compatible
 browsers that support the NPAPI.
 .
 This is a dependency package, it can be safely removed after upgrade.