Format: 1.8 Date: Fri, 15 Oct 2010 16:05:20 +0200 Source: sun-java6 Binary: sun-java6-jre sun-java6-bin sun-java6-plugin ia32-sun-java6-bin ia32-sun-java6-plugin sun-java6-fonts sun-java6-jdk sun-java6-demo sun-java6-source sun-java6-javadb Architecture: i386 all Version: 6.22-0ubuntu1~10.10 Distribution: maverick Urgency: low Maintainer: Ubuntu/i386 Build Daemon Changed-By: Matthias Klose Description: ia32-sun-java6-bin - Sun Java(TM) Runtime Environment (JRE) 6 (32-bit) ia32-sun-java6-plugin - The Java(TM) Plug-in, Java SE 6 (32-bit) sun-java6-bin - Sun Java(TM) Runtime Environment (JRE) 6 (architecture dependent sun-java6-demo - Sun Java(TM) Development Kit (JDK) 6 demos and examples sun-java6-fonts - Lucida TrueType fonts (from the Sun JRE) sun-java6-javadb - Java(TM) DB, Sun Microsystems' distribution of Apache Derby sun-java6-jdk - Sun Java(TM) Development Kit (JDK) 6 sun-java6-jre - Sun Java(TM) Runtime Environment (JRE) 6 (architecture independen sun-java6-plugin - The Java(TM) Plug-in, Java SE 6 sun-java6-source - Sun Java(TM) Development Kit (JDK) 6 source files Changes: sun-java6 (6.22-0ubuntu1~10.10) maverick; urgency=low . * SECURITY UPDATE: multiple upstream vulnerabilities. Upstream fixes: - (CVE-2010-3556): JDK unspecified vulnerability in 2D component - (CVE-2010-3562): JDK IndexColorModel double-free - (CVE-2010-3565): JDK JPEG writeImage remote code execution - (CVE-2010-3566): JDK ICC Profile remote code execution - (CVE-2010-3567): Crash in ICU Opentype layout engine due to mismatch in character counts - (CVE-2010-3571): JDK unspecified vulnerability in 2D component - (CVE-2010-3554): JDK corba reflection vulnerabilities - (CVE-2010-3563): JDK unspecified vulnerability in Deployment component - (CVE-2010-3568): JDK Deserialization Race condition - (CVE-2010-3569): JDK Serialization inconsistencies - (CVE-2010-3558): JDK unspecified vulnerability in Java Web Start component - (CVE-2010-3552): JDK unspecified vulnerability in New Java Plugin component - (CVE-2010-3559): JDK unspecified vulnerability in Sound component - (CVE-2010-3572): JDK unspecified vulnerability in Sound component - (CVE-2010-3553): UIDefault.ProxyLazyValue has unsafe reflection usage - (CVE-2010-3555): JDK unspecified vulnerability in Deployment component - (CVE-2010-3550): JDK unspecified vulnerability in Java Web Start component - (CVE-2010-3570): JDK unspecified vulnerability in Deployment Toolkit - (CVE-2010-3561): Privileged ServerSocket.accept allows receiving connections from any host - (CVE-2009-3555): TLS: MITM attacks via session renegotiation - (CVE-2010-1321): krb5: null pointer dereference in GSS-API library leads to DoS - (CVE-2010-3549): HttpURLConnection chunked encoding issue (Http request splitting) - (CVE-2010-3557): JDK Swing mutable static - (CVE-2010-3541): limit setting of some request headers in HttpURLConnection - (CVE-2010-3573): limit HTTP request cookie headers in HttpURLConnection - (CVE-2010-3574): limit use of TRACE method in HttpURLConnection - (CVE-2010-3548): JDK DNS server IP address information leak - (CVE-2010-3551): NetworkInterface reveals local network address to untrusted code - (CVE-2010-3560): JDK unspecified vulnerability in Networking component Checksums-Sha1: 5ae8b556ea597669af516dab1cd2468722086aca 29686282 sun-java6-bin_6.22-0ubuntu1~10.10_i386.deb 5ac6c743b8ea75347bfd0257a372b7dac5a3e733 1864 sun-java6-plugin_6.22-0ubuntu1~10.10_i386.deb 8c6642d173c2f7fe1981e72c846ec82f7072cfda 19705212 sun-java6-jdk_6.22-0ubuntu1~10.10_i386.deb 9bba4d6b2b872b157761b30d70900eb46e71c4eb 12101472 sun-java6-demo_6.22-0ubuntu1~10.10_i386.deb 64e89fa1e9d72cf0d20674157719af670371a81c 6419770 sun-java6-jre_6.22-0ubuntu1~10.10_all.deb acd35655b96dcef0d56be4a26cca5051079aa30e 1880 sun-java6-fonts_6.22-0ubuntu1~10.10_all.deb 02852a52f2046ff7c0beebc8baafaeebb6521fb2 17904842 sun-java6-source_6.22-0ubuntu1~10.10_all.deb d222371d68871cccd9ce9d9876af21667c422896 10202496 sun-java6-javadb_6.22-0ubuntu1~10.10_all.deb Checksums-Sha256: 35ba8a9005d9251505a286f07a7d3a3f3c1c21ec672028a1791227340f28859e 29686282 sun-java6-bin_6.22-0ubuntu1~10.10_i386.deb d40f140bdbc150979fe0567e0e849eb43f4a35000a14400587941977cad0cbe1 1864 sun-java6-plugin_6.22-0ubuntu1~10.10_i386.deb cc2b1df2c49fa0f9ae61fb42a8ba5297b5a167528e3ba82f76141219751a3713 19705212 sun-java6-jdk_6.22-0ubuntu1~10.10_i386.deb 297b0ae8e3f60b377bc2313eaff0fd26fe3825df2230e8f1c70546a2489d89b0 12101472 sun-java6-demo_6.22-0ubuntu1~10.10_i386.deb aca54d917e15b432dd4d35060b26946ebefef2f743736fd7792d2d2707f64480 6419770 sun-java6-jre_6.22-0ubuntu1~10.10_all.deb 0290035e3d5899f89ae15b87e595437ffb29da1f281b446b00b0755d81e1baab 1880 sun-java6-fonts_6.22-0ubuntu1~10.10_all.deb 4d3cf5002cabdc9379527307c492a8bc80532b9f9daec9277401962fc5b6806b 17904842 sun-java6-source_6.22-0ubuntu1~10.10_all.deb 164d8861403448927cefece334131a7c0d62c176a9f31850c45a87c7d4f748bd 10202496 sun-java6-javadb_6.22-0ubuntu1~10.10_all.deb Files: 7590f470947e50e9b9530590de179dab 29686282 partner/java optional sun-java6-bin_6.22-0ubuntu1~10.10_i386.deb db1e79e7dd0f9cb968d67c6298f520a2 1864 partner/web optional sun-java6-plugin_6.22-0ubuntu1~10.10_i386.deb 7c927c62de91fbb653122c9a6901f6c5 19705212 partner/java optional sun-java6-jdk_6.22-0ubuntu1~10.10_i386.deb 14ec5ce29fdcadabcce132c1e865a01e 12101472 partner/java optional sun-java6-demo_6.22-0ubuntu1~10.10_i386.deb b8dd429cf6aed0c18d877cbccda91cde 6419770 partner/java optional sun-java6-jre_6.22-0ubuntu1~10.10_all.deb 9d5b2e8e90a598b4941a438ec8d834ff 1880 partner/fonts optional sun-java6-fonts_6.22-0ubuntu1~10.10_all.deb 31d3c9db2ff97d20054c37f8896cce90 17904842 partner/java optional sun-java6-source_6.22-0ubuntu1~10.10_all.deb 38079439c78eda3a94e60e4a8f598384 10202496 partner/java optional sun-java6-javadb_6.22-0ubuntu1~10.10_all.deb