Bugzilla – Bug 747208
VUL-0: java-1_6_0-openjdk: icedtea6 1.10.6 and 1.11.1 security release
Last modified: 2012-02-29 14:34:35 UTC
http://icedtea.classpath.org/hg/release/icedtea6-1.10/file/icedtea6-1.10.6/NEWS http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.1/NEWS New in release 1.11.1 (2012-02-14): * Security fixes - S7082299, CVE-2011-3571: Fix in AtomicReferenceArray - S7088367, CVE-2011-3563: Fix issues in java sound - S7110683, CVE-2012-0502: Issues with some KeyboardFocusManager method - S7110687, CVE-2012-0503: Issues with TimeZone class - S7110700, CVE-2012-0505: Enhance exception throwing mechanism in ObjectStreamClass - S7110704, CVE-2012-0506: Issues with some method in corba - S7112642, CVE-2012-0497: Incorrect checking for graphics rendering object - S7118283, CVE-2012-0501: Better input parameter checking in zip file processing - S7126960, CVE-2011-5035: (httpserver) Add property to limit number of request headers to the HTTP Server * Bug fixes - PR865: Patching fails with patches/ecj/jaxws-getdtdtype.patch New in release 1.10.6 (2012-02-14): * Security fixes - S7082299, CVE-2011-3571: Fix in AtomicReferenceArray - S7088367, CVE-2011-3563: Fix issues in java sound - S7110683, CVE-2012-0502: Issues with some KeyboardFocusManager method - S7110687, CVE-2012-0503: Issues with TimeZone class - S7110700, CVE-2012-0505: Enhance exception throwing mechanism in ObjectStreamClass - S7110704, CVE-2012-0506: Issues with some method in corba - S7112642, CVE-2012-0497: Incorrect checking for graphics rendering object - S7118283, CVE-2012-0501: Better input parameter checking in zip file processing - S7126960, CVE-2011-5035: Add property to limit number of request headers to the HTTP Server * Bug fixes - RH580478: Desktop files should not use hardcoded path
The SWAMPID for this issue is 45542. This issue was rated as important. Please submit fixed packages until 2012-02-22. When done, please reassign the bug to security-team@suse.de. Patchinfo will be handled by security team.
bugbot adjusting priority
I would follow the 1.11.1 everywhere as usual
This is an autogenerated message for OBS integration: This bug (747208) was mentioned in https://build.opensuse.org/request/show/105974 11.4 / java-1_6_0-openjdk
submitted fixed packages: 12.1: 105985 11.4: 105974 11.2: 105983 11.1: 105984 @wolfgang: not sure, if evergreen for 11.3 is planned or not, but sources are available at home:mvyskocil:branches:OBS_Maintained:java-1_6_0-openjdk java-1_6_0-openjdk.openSUSE_11.3 as well
This is an autogenerated message for OBS integration: This bug (747208) was mentioned in https://build.opensuse.org/request/show/105983 Evergreen:11.2 / java-1_6_0-openjdk https://build.opensuse.org/request/show/105984 Evergreen:11.1 / java-1_6_0-openjdk https://build.opensuse.org/request/show/105985 12.1 / java-1_6_0-openjdk
This is an autogenerated message for OBS integration: This bug (747208) was mentioned in https://build.opensuse.org/request/show/106302 11.4 / java-1_6_0-openjdk
*** Bug 706068 has been marked as a duplicate of this bug. ***
This is an autogenerated message for OBS integration: This bug (747208) was mentioned in https://build.opensuse.org/request/show/106535 Evergreen:11.2 / java-1_6_0-openjdk
This is an autogenerated message for OBS integration: This bug (747208) was mentioned in https://build.opensuse.org/request/show/106539 Evergreen:11.1 / java-1_6_0-openjdk
Update released for: java-1_6_0-openjdk, java-1_6_0-openjdk-debuginfo, java-1_6_0-openjdk-debugsource, java-1_6_0-openjdk-demo, java-1_6_0-openjdk-demo-debuginfo, java-1_6_0-openjdk-devel, java-1_6_0-openjdk-devel-debuginfo, java-1_6_0-openjdk-javadoc, java-1_6_0-openjdk-plugin, java-1_6_0-openjdk-plugin-debuginfo, java-1_6_0-openjdk-src Products: openSUSE 11.4 (debug, i586, x86_64)
released, thanks!
Update released for: java-1_6_0-openjdk, java-1_6_0-openjdk-debuginfo, java-1_6_0-openjdk-debugsource, java-1_6_0-openjdk-demo, java-1_6_0-openjdk-devel, java-1_6_0-openjdk-javadoc, java-1_6_0-openjdk-src Products: SLE-DEBUGINFO 11-SP1 (i386, x86_64) SLE-DESKTOP 11-SP1 (i386, x86_64) SLE-DESKTOP 11-SP1-FOR-SP2 (i386, x86_64)