lp:ubuntu/karmic-updates/openjdk-6b18

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

6. By Steve Beattie on 2011-03-09

[ Matthias Klose ]
* IcedTea6 1.8.7 release.
  - S6878713, CVE-2010-4469: Hotspot backward jsr heap corruption.
  - S6907662, CVE-2010-4465: Swing timer-based security manager bypass.
  - S6994263, CVE-2010-4472: Untrusted code allowed to replace
    DSIG/C14N implementation.
  - S6981922, CVE-2010-4448: DNS cache poisoning by untrusted applets.
  - S6983554, CVE-2010-4450: Launcher incorrect processing of empty
    library path entries.
  - S6985453, CVE-2010-4471: Java2D font-related system property leak.
  - S6927050, CVE-2010-4470: JAXP untrusted component state manipulation.
  - CVE-2011-0706: Multiple signers privilege escalation.

* IcedTea6 1.8.6 release.
  - S4421494, CVE-2010-4476: infinite loop while parsing double literal.

[ Steve Beattie ]
* debian/patches/hotspot-fix_added_define.patch: added to fix
  redefinition added by patch for S6878713

5. By Steve Beattie on 2011-01-27

* IcedTea6 1.8.5 release.
  - CVE-2011-0025: IcedTea jarfile signature verification bypass.

4. By Matthias Klose on 2011-01-07

* IcedTea6 1.8.4 release.
  - Fix CVE-2010-4351: IcedTea JNLP SecurityManager bypass.

3. By Matthias Klose on 2010-10-20

* Build as separate source, just for armel.
* Merge the -lib package into the -jre-headless package.

2. By Matthias Klose on 2010-09-07

* Build as separate source, just for armel.
* Merge the -lib package into the -jre-headless package.

1. By Matthias Klose on 2010-09-07

Import upstream version 6b18-1.8.1