Your message dated Fri, 15 Oct 2010 11:38:02 +0000
with message-id <e1p6ibq-0000dz...@franck.debian.org>
and subject line Bug#600259: fixed in sun-java6 6.22-1
has caused the Debian Bug report #600259,
regarding sun-java6: Multiple security issues
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
600259: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=600259
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: sun-java6
Severity: grave
Tags: security
Justification: user security hole
Oracle has fixed several Java security issues, which
also need to be fixed in sid:
http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html
Cheers,
Moritz
-- System Information:
Debian Release: 5.0.1
Architecture: amd64 (x86_64)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.32-ucs16-amd64
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
--- End Message ---
--- Begin Message ---
Source: sun-java6
Source-Version: 6.22-1
We believe that the bug you reported is fixed in the latest version of
sun-java6, which is due to be installed in the Debian FTP archive:
sun-java6-bin_6.22-1_i386.deb
to non-free/s/sun-java6/sun-java6-bin_6.22-1_i386.deb
sun-java6-demo_6.22-1_i386.deb
to non-free/s/sun-java6/sun-java6-demo_6.22-1_i386.deb
sun-java6-fonts_6.22-1_all.deb
to non-free/s/sun-java6/sun-java6-fonts_6.22-1_all.deb
sun-java6-javadb_6.22-1_all.deb
to non-free/s/sun-java6/sun-java6-javadb_6.22-1_all.deb
sun-java6-jdk_6.22-1_i386.deb
to non-free/s/sun-java6/sun-java6-jdk_6.22-1_i386.deb
sun-java6-jre_6.22-1_all.deb
to non-free/s/sun-java6/sun-java6-jre_6.22-1_all.deb
sun-java6-plugin_6.22-1_i386.deb
to non-free/s/sun-java6/sun-java6-plugin_6.22-1_i386.deb
sun-java6-source_6.22-1_all.deb
to non-free/s/sun-java6/sun-java6-source_6.22-1_all.deb
sun-java6_6.22-1.debian.tar.gz
to non-free/s/sun-java6/sun-java6_6.22-1.debian.tar.gz
sun-java6_6.22-1.dsc
to non-free/s/sun-java6/sun-java6_6.22-1.dsc
sun-java6_6.22.orig.tar.gz
to non-free/s/sun-java6/sun-java6_6.22.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 600...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Sylvestre Ledru <sylves...@debian.org> (supplier of updated sun-java6 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Fri, 15 Oct 2010 10:05:39 +0200
Source: sun-java6
Binary: sun-java6-jre sun-java6-bin sun-java6-plugin ia32-sun-java6-bin
ia32-sun-java6-plugin sun-java6-fonts sun-java6-jdk sun-java6-demo
sun-java6-source sun-java6-javadb
Architecture: source i386 all
Version: 6.22-1
Distribution: unstable
Urgency: high
Maintainer: Debian Java Maintainers
<pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Sylvestre Ledru <sylves...@debian.org>
Description:
ia32-sun-java6-bin - Sun Java(TM) Runtime Environment (JRE) 6 (32-bit)
ia32-sun-java6-plugin - The Java(TM) Plug-in, Java SE 6 (32-bit)
sun-java6-bin - Sun Java(TM) Runtime Environment (JRE) 6 (architecture
dependent
sun-java6-demo - Sun Java(TM) Development Kit (JDK) 6 demos and examples
sun-java6-fonts - Lucida TrueType fonts (from the Sun JRE)
sun-java6-javadb - Java(TM) DB, Sun Microsystems' distribution of Apache Derby
sun-java6-jdk - Sun Java(TM) Development Kit (JDK) 6
sun-java6-jre - Sun Java(TM) Runtime Environment (JRE) 6 (architecture
independen
sun-java6-plugin - The Java(TM) Plug-in, Java SE 6
sun-java6-source - Sun Java(TM) Development Kit (JDK) 6 source files
Closes: 480570 539288 597313 600259
Changes:
sun-java6 (6.22-1) unstable; urgency=high
.
[ Torsten Werner ]
* Add file /etc/java-6-sun/swing.properties. (Closes: #480570)
* Install the desktop file for jvisualvm and remove the one for jconsole.
(Closes: #539288)
.
[ Sylvestre Ledru ]
* New upstream release (Closes: #600259)
* SECURITY UPDATE: multiple upstream vulnerabilities. Upstream fixes:
- (CVE-2010-3556): JDK unspecified vulnerability in 2D component
- (CVE-2010-3562): JDK IndexColorModel double-free
- (CVE-2010-3565): JDK JPEG writeImage remote code execution
- (CVE-2010-3566): JDK ICC Profile remote code execution
- (CVE-2010-3567): Crash in ICU Opentype layout engine due to mismatch in
character counts
- (CVE-2010-3571): JDK unspecified vulnerability in 2D component
- (CVE-2010-3554): JDK corba reflection vulnerabilities
- (CVE-2010-3563): JDK unspecified vulnerability in Deployment component
- (CVE-2010-3568): JDK Deserialization Race condition
- (CVE-2010-3569): JDK Serialization inconsistencies
- (CVE-2010-3558): JDK unspecified vulnerability in Java Web Start
component
- (CVE-2010-3552): JDK unspecified vulnerability in New Java Plugin
component
- (CVE-2010-3559): JDK unspecified vulnerability in Sound component
- (CVE-2010-3572): JDK unspecified vulnerability in Sound component
- (CVE-2010-3553): UIDefault.ProxyLazyValue has unsafe reflection usage
- (CVE-2010-3555): JDK unspecified vulnerability in Deployment component
- (CVE-2010-3550): JDK unspecified vulnerability in Java Web Start
component
- (CVE-2010-3570): JDK unspecified vulnerability in Deployment Toolkit
- (CVE-2010-3561): Privileged ServerSocket.accept allows receiving
connections from any host
- (CVE-2009-3555): TLS: MITM attacks via session renegotiation
- (CVE-2010-1321): krb5: null pointer dereference in GSS-API library leads
to DoS
- (CVE-2010-3549): HttpURLConnection chunked encoding issue (Http request
splitting)
- (CVE-2010-3557): JDK Swing mutable static
- (CVE-2010-3541): limit setting of some request headers in
HttpURLConnection
- (CVE-2010-3573): limit HTTP request cookie headers in HttpURLConnection
- (CVE-2010-3574): limit use of TRACE method in HttpURLConnection
- (CVE-2010-3548): JDK DNS server IP address information leak
- (CVE-2010-3551): NetworkInterface reveals local network address to
untrusted code
- (CVE-2010-3560): JDK unspecified vulnerability in Networking component
* Update of the italian po. Thanks to Vincenzo Campanella (Closes: #597313)
Checksums-Sha1:
98b9ad0d0330f855810fd4d9b201cfdd246538ef 1662 sun-java6_6.22-1.dsc
d6f0032323ed0bd7fc00d86776920a48bebe84ba 165194956 sun-java6_6.22.orig.tar.gz
4313e4b5104b8ecd4d4f2b4d4ca0b5896d061fae 89430 sun-java6_6.22-1.debian.tar.gz
d6cf1688aa7edc2cb07df6f4482593a71a6b8ac4 29696156 sun-java6-bin_6.22-1_i386.deb
a39720bca8c4471566a55cd62be790cc07d6881a 1996 sun-java6-plugin_6.22-1_i386.deb
73cafd4a3f32aa21b667217810fa881f703ce17b 19718512 sun-java6-jdk_6.22-1_i386.deb
b6d9057fc33c4e3ceb394ac5a3c25a05ebb60e23 12153492
sun-java6-demo_6.22-1_i386.deb
0b03a92754d92f69aa85400bc33a15077a1278b1 6428392 sun-java6-jre_6.22-1_all.deb
d16fb65b3e0cfe106cb3c260f3b141d933b69673 1874 sun-java6-fonts_6.22-1_all.deb
6072801a6d3cfa17b091a53bb678f2559a621892 17904770
sun-java6-source_6.22-1_all.deb
b444a316a2292cd9a2fcce7a074b458732a1b958 10393890
sun-java6-javadb_6.22-1_all.deb
Checksums-Sha256:
100491794fae30dfea22754257acab14bb2d734011b9f6e43daf57f676b9cb26 1662
sun-java6_6.22-1.dsc
6c144a6524cb811ab4fa67ea857474d231c77222088166660b3957ed6dc1678c 165194956
sun-java6_6.22.orig.tar.gz
a7fe04c264998555c1ebb1af936612606b98342ec718584b45bbb2bc48a2a705 89430
sun-java6_6.22-1.debian.tar.gz
6620be8508ad17ab575f3d67f0b0f48f4f975414ddf9d8045d54e54c8b0cb846 29696156
sun-java6-bin_6.22-1_i386.deb
c8db2688d36e9e4ca4ea10c103a2d7ce3b2eb79e96df31804a507a021a5bccac 1996
sun-java6-plugin_6.22-1_i386.deb
80791b396dd1dfc041584776fa3590576fa554c565e8e7fbdc86927a8aaaf3dc 19718512
sun-java6-jdk_6.22-1_i386.deb
c7a3123814d5502a8386405428919fc67ba54ce3301485febde1655d8a3e1d4d 12153492
sun-java6-demo_6.22-1_i386.deb
396aa3f20942e67429467632edcbbb576f8ad9e7a8629eac0054810e649af253 6428392
sun-java6-jre_6.22-1_all.deb
14ee22e37ba981e5d58b34d4ea5d3e2cbce333ec167a4ca4b2c597d9d0329fb1 1874
sun-java6-fonts_6.22-1_all.deb
0fc1946c9f1a3c6f9a3a436d60bd009047bf0d38a93d74657e2e87a7b659d501 17904770
sun-java6-source_6.22-1_all.deb
00c6231d1e91fb55c4ff031e3e24b577d278dde78acf22aabf43036aeb29748c 10393890
sun-java6-javadb_6.22-1_all.deb
Files:
fd0f60ca40e755706dd6d88c1f13bce8 1662 non-free/java optional
sun-java6_6.22-1.dsc
981bd97edf98849f108df9d3d40352bb 165194956 non-free/java optional
sun-java6_6.22.orig.tar.gz
3e0264f65655602023a7872328b065f9 89430 non-free/java optional
sun-java6_6.22-1.debian.tar.gz
81b7aa50e92c41e5f521faf10cf7e6ca 29696156 non-free/java optional
sun-java6-bin_6.22-1_i386.deb
69eb133cdcadd5a9957ace948c8b175e 1996 non-free/web optional
sun-java6-plugin_6.22-1_i386.deb
7c93db3c265b42847d9e34c8c77027d5 19718512 non-free/java optional
sun-java6-jdk_6.22-1_i386.deb
640dd0eb2315f7b4b7aa0ac5abb86c3e 12153492 non-free/java optional
sun-java6-demo_6.22-1_i386.deb
6771b6c67c772691ee1f4706e4b66133 6428392 non-free/java optional
sun-java6-jre_6.22-1_all.deb
16c8abfd4fb35310ec3a184f0f2f79de 1874 non-free/fonts optional
sun-java6-fonts_6.22-1_all.deb
bc5f3f27c2cca7422200faa7a92cf098 17904770 non-free/java optional
sun-java6-source_6.22-1_all.deb
9425b39b20514157d551475a65c196ef 10393890 non-free/java optional
sun-java6-javadb_6.22-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEARECAAYFAky4Lw0ACgkQiOXXM92JlhAsVQCfZvvzOl4TtW6zquWcjY4zu60u
PCoAoPLv0/fVAaITd+sulPNW6OCgemC7
=ybaW
-----END PGP SIGNATURE-----
--- End Message ---
__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers>. Please
use
debian-j...@lists.debian.org for discussions and questions.