Format: 1.8 Date: Mon, 09 Nov 2009 18:50:15 +0100 Source: openjdk-6 Binary: openjdk-6-jdk openjdk-6-jre-headless openjdk-6-jre openjdk-6-jre-lib openjdk-6-demo openjdk-6-source openjdk-6-doc openjdk-6-dbg icedtea6-plugin icedtea-6-jre-cacao openjdk-6-jre-zero Architecture: lpia Version: 6b16-1.6.1-3ubuntu1 Distribution: karmic Urgency: low Maintainer: Ubuntu/lpia Build Daemon Changed-By: Matthias Klose Description: icedtea-6-jre-cacao - Alternative JVM for OpenJDK, using Cacao icedtea6-plugin - web browser plugin based on OpenJDK and IcedTea to execute Java a openjdk-6-dbg - Java runtime based on OpenJDK (debugging symbols) openjdk-6-demo - Java runtime based on OpenJDK (demos and examples) openjdk-6-doc - OpenJDK Development Kit (JDK) documentation openjdk-6-jdk - OpenJDK Development Kit (JDK) openjdk-6-jre - OpenJDK Java runtime, using ${vm:Name} openjdk-6-jre-headless - OpenJDK Java runtime, using ${vm:Name} (headless) openjdk-6-jre-lib - OpenJDK Java runtime (architecture independent libraries) openjdk-6-jre-zero - Alternative JVM for OpenJDK, using Zero/Shark openjdk-6-source - OpenJDK Development Kit (JDK) source files Changes: openjdk-6 (6b16-1.6.1-3ubuntu1) karmic-security; urgency=low . * Security updates: - (CVE-2009-3728) ICC_Profile file existence detection information leak (6631533). - (CVE-2009-3885) BMP parsing DoS with UNC ICC links (6632445). - (CVE-2009-3881) resurrected classloaders can still have children (6636650). - (CVE-2009-3882) Numerous static security flaws in Swing (findbugs) (6657026). - (CVE-2009-3883) Mutable statics in Windows PL&F (findbugs) (6657138). - (CVE-2009-3880) UI logging information leakage (6664512). - (CVE-2009-3879) GraphicsConfiguration information leak (6822057). - (CVE-2009-3884) zoneinfo file existence information leak (6824265). - (CVE-2009-2409) deprecate MD2 in SSL cert validation (Kaminsky) (6861062). - (CVE-2009-3873) JPEG Image Writer quantization problem (6862968). - (CVE-2009-3875) MessageDigest.isEqual introduces timing attack vulnerabilities (6863503). - (CVE-2009-3876, CVE-2009-3877) OpenJDK ASN.1/DER input stream parser denial of service (6864911). - (CVE-2009-3869) JRE AWT setDifflCM stack overflow (6872357). - (CVE-2009-3874) ImageI/O JPEG heap overflow (6874643. - (CVE-2009-3871) JRE AWT setBytePixels heap overflow (6872358). Checksums-Sha1: 433219bc341f9932e02d35ec93c6788dfd6976bf 10726388 openjdk-6-jdk_6b16-1.6.1-3ubuntu1_lpia.deb ea5f91f52b709a71a4e19c20582878ea88e5cb4d 26103058 openjdk-6-jre-headless_6b16-1.6.1-3ubuntu1_lpia.deb 63fc6e23cdb6f1aabb89af31b1dfe6ae7da05af7 254824 openjdk-6-jre_6b16-1.6.1-3ubuntu1_lpia.deb 62c2e86de665463719e756335e79a6c17bb999a3 2350050 openjdk-6-demo_6b16-1.6.1-3ubuntu1_lpia.deb 5d4c3ce746fc43ed749dbd7e978ba2b16e80291d 155019980 openjdk-6-dbg_6b16-1.6.1-3ubuntu1_lpia.deb ecc0722ee719e1052dc45d62486568faae77a583 78988 icedtea6-plugin_6b16-1.6.1-3ubuntu1_lpia.deb 99c888204e4e7e46a77ea137a243fdb6339791da 294784 icedtea-6-jre-cacao_6b16-1.6.1-3ubuntu1_lpia.deb 22fd440cc51dc894b55d1e602a3fca0fce5c095a 4171648 openjdk-6-jre-zero_6b16-1.6.1-3ubuntu1_lpia.deb Checksums-Sha256: 7f43e72d79e39e16711dc4fa2d79bdc03f8c6957a136958d85012e9c9ca0617e 10726388 openjdk-6-jdk_6b16-1.6.1-3ubuntu1_lpia.deb 5e16922963cdc648a45c4a7e6dab2a7c4565c4e16a59c1a03bc6ef2314f5b00f 26103058 openjdk-6-jre-headless_6b16-1.6.1-3ubuntu1_lpia.deb 05c0663f3908f453997fc6de510c39405c12b065ff0b21d2019f8dde56d22e6a 254824 openjdk-6-jre_6b16-1.6.1-3ubuntu1_lpia.deb c768160654fc7fad8900c3ee672c860fd770813a2af27a5a7f4e9313444f9082 2350050 openjdk-6-demo_6b16-1.6.1-3ubuntu1_lpia.deb 28f0f3f975d6b16d076b59aeab53ff1ec5c4ba92f9ba26c2f03872e8930db687 155019980 openjdk-6-dbg_6b16-1.6.1-3ubuntu1_lpia.deb bf172fc47cc835f805fa4be75173b676f79bdf3f668654e5335df13ebc010987 78988 icedtea6-plugin_6b16-1.6.1-3ubuntu1_lpia.deb 750a4ee10cb312fd3399d5efb894cf8465d63e95642f3083538a91d4eb75637b 294784 icedtea-6-jre-cacao_6b16-1.6.1-3ubuntu1_lpia.deb 3e9c80087a0cc681410757779f765151b1f5d1ef8d5adc4f39a480065b461adb 4171648 openjdk-6-jre-zero_6b16-1.6.1-3ubuntu1_lpia.deb Files: 66cefe8225809976b8c5ca37363845da 10726388 java optional openjdk-6-jdk_6b16-1.6.1-3ubuntu1_lpia.deb e07b9a3a3e7f702d50ff19436e175b4f 26103058 java optional openjdk-6-jre-headless_6b16-1.6.1-3ubuntu1_lpia.deb 90b039cd87834806ffe3c413306f30c6 254824 java optional openjdk-6-jre_6b16-1.6.1-3ubuntu1_lpia.deb 552a4d538753c2098fe7ffdf59491f1d 2350050 java extra openjdk-6-demo_6b16-1.6.1-3ubuntu1_lpia.deb 9cf50f8db068bb7939f599605e0103a7 155019980 debug extra openjdk-6-dbg_6b16-1.6.1-3ubuntu1_lpia.deb b6006e07cafd244f1cb6af3aeb576888 78988 web optional icedtea6-plugin_6b16-1.6.1-3ubuntu1_lpia.deb 2e3e9a17212bcf835af1766a6b2be6f3 294784 java extra icedtea-6-jre-cacao_6b16-1.6.1-3ubuntu1_lpia.deb 6c7721fa097d5c9e06d3684904bd2649 4171648 java extra openjdk-6-jre-zero_6b16-1.6.1-3ubuntu1_lpia.deb