Format: 1.8 Date: Fri, 15 Oct 2010 16:05:20 +0200 Source: sun-java6 Binary: sun-java6-jre sun-java6-bin sun-java6-plugin ia32-sun-java6-bin ia32-sun-java6-plugin sun-java6-fonts sun-java6-jdk sun-java6-demo sun-java6-source sun-java6-javadb Architecture: amd64 Version: 6.22-0ubuntu1~10.10 Distribution: maverick Urgency: low Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Matthias Klose Description: ia32-sun-java6-bin - Sun Java(TM) Runtime Environment (JRE) 6 (32-bit) ia32-sun-java6-plugin - The Java(TM) Plug-in, Java SE 6 (32-bit) sun-java6-bin - Sun Java(TM) Runtime Environment (JRE) 6 (architecture dependent sun-java6-demo - Sun Java(TM) Development Kit (JDK) 6 demos and examples sun-java6-fonts - Lucida TrueType fonts (from the Sun JRE) sun-java6-javadb - Java(TM) DB, Sun Microsystems' distribution of Apache Derby sun-java6-jdk - Sun Java(TM) Development Kit (JDK) 6 sun-java6-jre - Sun Java(TM) Runtime Environment (JRE) 6 (architecture independen sun-java6-plugin - The Java(TM) Plug-in, Java SE 6 sun-java6-source - Sun Java(TM) Development Kit (JDK) 6 source files Changes: sun-java6 (6.22-0ubuntu1~10.10) maverick; urgency=low . * SECURITY UPDATE: multiple upstream vulnerabilities. Upstream fixes: - (CVE-2010-3556): JDK unspecified vulnerability in 2D component - (CVE-2010-3562): JDK IndexColorModel double-free - (CVE-2010-3565): JDK JPEG writeImage remote code execution - (CVE-2010-3566): JDK ICC Profile remote code execution - (CVE-2010-3567): Crash in ICU Opentype layout engine due to mismatch in character counts - (CVE-2010-3571): JDK unspecified vulnerability in 2D component - (CVE-2010-3554): JDK corba reflection vulnerabilities - (CVE-2010-3563): JDK unspecified vulnerability in Deployment component - (CVE-2010-3568): JDK Deserialization Race condition - (CVE-2010-3569): JDK Serialization inconsistencies - (CVE-2010-3558): JDK unspecified vulnerability in Java Web Start component - (CVE-2010-3552): JDK unspecified vulnerability in New Java Plugin component - (CVE-2010-3559): JDK unspecified vulnerability in Sound component - (CVE-2010-3572): JDK unspecified vulnerability in Sound component - (CVE-2010-3553): UIDefault.ProxyLazyValue has unsafe reflection usage - (CVE-2010-3555): JDK unspecified vulnerability in Deployment component - (CVE-2010-3550): JDK unspecified vulnerability in Java Web Start component - (CVE-2010-3570): JDK unspecified vulnerability in Deployment Toolkit - (CVE-2010-3561): Privileged ServerSocket.accept allows receiving connections from any host - (CVE-2009-3555): TLS: MITM attacks via session renegotiation - (CVE-2010-1321): krb5: null pointer dereference in GSS-API library leads to DoS - (CVE-2010-3549): HttpURLConnection chunked encoding issue (Http request splitting) - (CVE-2010-3557): JDK Swing mutable static - (CVE-2010-3541): limit setting of some request headers in HttpURLConnection - (CVE-2010-3573): limit HTTP request cookie headers in HttpURLConnection - (CVE-2010-3574): limit use of TRACE method in HttpURLConnection - (CVE-2010-3548): JDK DNS server IP address information leak - (CVE-2010-3551): NetworkInterface reveals local network address to untrusted code - (CVE-2010-3560): JDK unspecified vulnerability in Networking component Checksums-Sha1: a0962705fba8c304ac2720267f1771e4aa64143c 27935174 sun-java6-bin_6.22-0ubuntu1~10.10_amd64.deb e011229e027d0a1b15e980ba5227cb1dd2101431 1862 sun-java6-plugin_6.22-0ubuntu1~10.10_amd64.deb 3ac801686a2709c68d9e8626f1c43383fe4cd7b6 29686538 ia32-sun-java6-bin_6.22-0ubuntu1~10.10_amd64.deb 712ee5773427e53935477366729b0518b7a9d0fd 19883684 sun-java6-jdk_6.22-0ubuntu1~10.10_amd64.deb c007c49c0456d8ba80c8f25f831dbe127bce5e51 12168336 sun-java6-demo_6.22-0ubuntu1~10.10_amd64.deb Checksums-Sha256: 36cfa15729631819eb1b5366992571b04e367032823b2f2e618c3a3b50b0e388 27935174 sun-java6-bin_6.22-0ubuntu1~10.10_amd64.deb 405cae8185b5fbe8ef093b067319a36d07b9c163cfc4032ed15882b27cf21a88 1862 sun-java6-plugin_6.22-0ubuntu1~10.10_amd64.deb 77094b06491acc8856aba2f0e201fadcbdfc50eff7f79066d7719f29159b0cda 29686538 ia32-sun-java6-bin_6.22-0ubuntu1~10.10_amd64.deb f5588714c87d43caa9c94592001cb1835dacb5f6a7ebca0c6d223cb6b4d5699d 19883684 sun-java6-jdk_6.22-0ubuntu1~10.10_amd64.deb 6d3f9ebacb0179aa0bcf6a55d4c51a226dc7da71a1c041b6a1790c64809acbe1 12168336 sun-java6-demo_6.22-0ubuntu1~10.10_amd64.deb Files: 5fb9611a97013f8e9eb82509d153ae78 27935174 partner/java optional sun-java6-bin_6.22-0ubuntu1~10.10_amd64.deb 284cb452d0a6e22cb0bd58b87df9daea 1862 partner/web optional sun-java6-plugin_6.22-0ubuntu1~10.10_amd64.deb 4b09f3daeefb56609e37687dd14b7024 29686538 partner/java optional ia32-sun-java6-bin_6.22-0ubuntu1~10.10_amd64.deb 1bbf4b7f4dfb7106c70cba04d42ceec0 19883684 partner/java optional sun-java6-jdk_6.22-0ubuntu1~10.10_amd64.deb 91c8997f7cc487aec5d05e12b93d54b4 12168336 partner/java optional sun-java6-demo_6.22-0ubuntu1~10.10_amd64.deb