openjdk-6 6b18-1.8.2-4ubuntu2 source package in Ubuntu

Changelog

openjdk-6 (6b18-1.8.2-4ubuntu2) lucid-security; urgency=low

  * No change rebuild to compensate for soyuz failure.

openjdk-6 (6b18-1.8.2-4ubuntu1) lucid-security; urgency=low

  * Upload to lucid.

openjdk-6 (6b18-1.8.2-4) unstable; urgency=low

  * Add -jdk replaces for -jre-headless. Closes: #600809.

openjdk-6 (6b18-1.8.2-3) unstable; urgency=low

  * Move all japanese man pages belonging to the jre into the -jre package.
    Closes: #600765.

openjdk-6 (6b18-1.8.2-2) unstable; urgency=low

  * Fix upgrade to symlinked timezone data. Closes: #600359.

openjdk-6 (6b18-1.8.2-1) unstable; urgency=high

  * Upload to unstable.

openjdk-6 (6b18-1.8.2-0ubuntu1) lucid-security; urgency=high

  * IcedTea6 1.8.2 release.
    - Security updates:
      - S6914943, CVE-2009-3555: TLS: MITM attacks via session renegotiation.
      - S6559775, CVE-2010-3568: OpenJDK Deserialization Race condition.
      - S6891766, CVE-2010-3554: OpenJDK corba reflection vulnerabilities.
      - S6925710, CVE-2010-3562: OpenJDK IndexColorModel double-free.
      - S6938813, CVE-2010-3557: OpenJDK Swing mutable static.
      - S6957564, CVE-2010-3548: OpenJDK DNS server IP address information
        leak.
      - S6958060, CVE-2010-3564: OpenJDK kerberos vulnerability.
      - S6963023, CVE-2010-3565: OpenJDK JPEG writeImage remote code execution.
      - S6963489, CVE-2010-3566: OpenJDK ICC Profile remote code execution.
      - S6966692, CVE-2010-3569: OpenJDK Serialization inconsistencies.
      - S6622002, CVE-2010-3553: UIDefault.ProxyLazyValue has unsafe
        reflection usage.
      - S6623943: javax.swing.TimerQueue's thread occasionally fails to start.
      - S6925672, CVE-2010-3561: Privileged ServerSocket.accept allows
        receiving connections from any host.
      - S6952017, CVE-2010-3549: HttpURLConnection chunked encoding issue
        (Http request splitting).
      - S6952603, CVE-2010-3551: NetworkInterface reveals local network
        address to untrusted code.
      - S6961084, CVE-2010-3541: limit setting of some request headers in
        HttpURLConnection.
      - S6963285, CVE-2010-3567: Crash in ICU Opentype layout engine due to
        mismatch in character counts.
      - S6980004, CVE-2010-3573: limit HTTP request cookie headers in
        HttpURLConnection.
      - S6981426, CVE-2010-3574: limit use of TRACE method in
        HttpURLConnection.
    - NetX and plugin fixes.
    - Backports from newer IcedTea releases.
  * Symlink timezone data.

openjdk-6 (6b18-1.8.1-2) unstable; urgency=low

  * Update from the 1.8 branch.
    - Fix hs16 build on sparc.
    - NetX fixes.
  * openjdk-6-jre-headless: Provide java-virtual-machine for older
    releases.
  * Don't run the mauve tests on mips.
  * Fix typos in the plugin package description. Closes: #590795.

openjdk-6 (6b18-1.8.1-1) unstable; urgency=low

  * Upload to unstable.
 -- Steve Beattie <email address hidden>   Mon, 25 Oct 2010 09:31:12 -0700