Format: 1.8 Date: Fri, 15 Oct 2010 16:05:20 +0200 Source: sun-java6 Binary: sun-java6-jre sun-java6-bin sun-java6-plugin ia32-sun-java6-bin ia32-sun-java6-plugin sun-java6-fonts sun-java6-jdk sun-java6-demo sun-java6-source sun-java6-javadb Architecture: amd64 Version: 6.22-0ubuntu1~10.04 Distribution: lucid Urgency: low Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Matthias Klose Description: ia32-sun-java6-bin - Sun Java(TM) Runtime Environment (JRE) 6 (32-bit) ia32-sun-java6-plugin - The Java(TM) Plug-in, Java SE 6 (32-bit) sun-java6-bin - Sun Java(TM) Runtime Environment (JRE) 6 (architecture dependent sun-java6-demo - Sun Java(TM) Development Kit (JDK) 6 demos and examples sun-java6-fonts - Lucida TrueType fonts (from the Sun JRE) sun-java6-javadb - Java(TM) DB, Sun Microsystems' distribution of Apache Derby sun-java6-jdk - Sun Java(TM) Development Kit (JDK) 6 sun-java6-jre - Sun Java(TM) Runtime Environment (JRE) 6 (architecture independen sun-java6-plugin - The Java(TM) Plug-in, Java SE 6 sun-java6-source - Sun Java(TM) Development Kit (JDK) 6 source files Changes: sun-java6 (6.22-0ubuntu1~10.04) lucid; urgency=low . * SECURITY UPDATE: multiple upstream vulnerabilities. Upstream fixes: - (CVE-2010-3556): JDK unspecified vulnerability in 2D component - (CVE-2010-3562): JDK IndexColorModel double-free - (CVE-2010-3565): JDK JPEG writeImage remote code execution - (CVE-2010-3566): JDK ICC Profile remote code execution - (CVE-2010-3567): Crash in ICU Opentype layout engine due to mismatch in character counts - (CVE-2010-3571): JDK unspecified vulnerability in 2D component - (CVE-2010-3554): JDK corba reflection vulnerabilities - (CVE-2010-3563): JDK unspecified vulnerability in Deployment component - (CVE-2010-3568): JDK Deserialization Race condition - (CVE-2010-3569): JDK Serialization inconsistencies - (CVE-2010-3558): JDK unspecified vulnerability in Java Web Start component - (CVE-2010-3552): JDK unspecified vulnerability in New Java Plugin component - (CVE-2010-3559): JDK unspecified vulnerability in Sound component - (CVE-2010-3572): JDK unspecified vulnerability in Sound component - (CVE-2010-3553): UIDefault.ProxyLazyValue has unsafe reflection usage - (CVE-2010-3555): JDK unspecified vulnerability in Deployment component - (CVE-2010-3550): JDK unspecified vulnerability in Java Web Start component - (CVE-2010-3570): JDK unspecified vulnerability in Deployment Toolkit - (CVE-2010-3561): Privileged ServerSocket.accept allows receiving connections from any host - (CVE-2009-3555): TLS: MITM attacks via session renegotiation - (CVE-2010-1321): krb5: null pointer dereference in GSS-API library leads to DoS - (CVE-2010-3549): HttpURLConnection chunked encoding issue (Http request splitting) - (CVE-2010-3557): JDK Swing mutable static - (CVE-2010-3541): limit setting of some request headers in HttpURLConnection - (CVE-2010-3573): limit HTTP request cookie headers in HttpURLConnection - (CVE-2010-3574): limit use of TRACE method in HttpURLConnection - (CVE-2010-3548): JDK DNS server IP address information leak - (CVE-2010-3551): NetworkInterface reveals local network address to untrusted code - (CVE-2010-3560): JDK unspecified vulnerability in Networking component Checksums-Sha1: 67cbcd6bd38928e4454fe62f1c871e4731d452b4 27932364 sun-java6-bin_6.22-0ubuntu1~10.04_amd64.deb 39a5342a49854677a8071a5f1d76b0e048d8c591 1862 sun-java6-plugin_6.22-0ubuntu1~10.04_amd64.deb 6faa660b318295e05166f58cc5218203d35d1f9d 29695528 ia32-sun-java6-bin_6.22-0ubuntu1~10.04_amd64.deb de9e9feb74aa2767762bc1e78434a798720b392c 19892222 sun-java6-jdk_6.22-0ubuntu1~10.04_amd64.deb 1d811090f0400c09647846d42bd9445b946edf2d 12147068 sun-java6-demo_6.22-0ubuntu1~10.04_amd64.deb Checksums-Sha256: e0eb85beafb714e826be84098e015fcd52f7f5824ae452592ed562bdc34569b7 27932364 sun-java6-bin_6.22-0ubuntu1~10.04_amd64.deb 5599f49cd5dd7c8b6a3eed5f47fb49c6469809ec91eee92171d86f945afc4b37 1862 sun-java6-plugin_6.22-0ubuntu1~10.04_amd64.deb 2b76670b636aab747216c153c6e1c852d8e7c5455778be7c2d59133c31464afb 29695528 ia32-sun-java6-bin_6.22-0ubuntu1~10.04_amd64.deb 73632aa8edf03068ddbd3b33b31b095ce00a6f69c9d47fb060c70b56644d2274 19892222 sun-java6-jdk_6.22-0ubuntu1~10.04_amd64.deb 4211dc32d3792f59535243d451a600ee969200f95ec78906b0f2d845516ef7a1 12147068 sun-java6-demo_6.22-0ubuntu1~10.04_amd64.deb Files: 9b1cf6f3fe39dac0eb6636d3f60e9811 27932364 partner/java optional sun-java6-bin_6.22-0ubuntu1~10.04_amd64.deb 042f9c1914a0a6cfab1a0eb5e4810701 1862 partner/web optional sun-java6-plugin_6.22-0ubuntu1~10.04_amd64.deb 5185c1a69a834a1bce90eba8e13d2878 29695528 partner/java optional ia32-sun-java6-bin_6.22-0ubuntu1~10.04_amd64.deb 6433415d29930c36e53c73664345519d 19892222 partner/java optional sun-java6-jdk_6.22-0ubuntu1~10.04_amd64.deb 2c8e883dd14ae55fe615b78a72e03945 12147068 partner/java optional sun-java6-demo_6.22-0ubuntu1~10.04_amd64.deb