First Last Prev Next    No search results available      Search page      Enter new bug
Bug#: 184407
Alias:
Product:
Component:
Status: RESOLVED
Resolution: FIXED
Assigned To: Gentoo Security <security@gentoo.org>
Hardware:
OS:
Version:
Priority:
Severity:
Reporter: Marko Steinberger <skywarp@gmx.net>
Add CC:
CC:
Remove selected CCs
URL:
Summary:
Status Whiteboard:
Keywords:

Filename Description Type Creator Created Size Actions
sun-jdk-1.6.0.02.diff sun-jdk-1.6.0.02 patch against sun-jdk-1.6.0.01.ebuild text/plain Marko Steinberger 2007-07-12 14:38 0000 689 bytes Details
sun-jdk-1.6.0.02.diff sun-jdk-1.6.0.02 patch against sun-jdk-1.6.0.01.ebuild patch Marko Steinberger 2007-07-12 14:38 0000 689 bytes Details | Diff
Create a New Attachment (proposed patch, testcase, etc.) View All

Bug 184407 depends on: Show dependency tree
Show dependency graph
Bug 184407 blocks:
Votes: 0    Show votes for this bug    Vote for this bug

Additional Comments: (this is where you put emerge --info)







View Bug Activity   |   Format For Printing   |   XML   |   Clone This Bug

Description:   Opened: 2007-07-06 11:56 0000 
New version released. Possibly includes fixes for security related issues.

Reproducible: Always

------- Comment #1 From Petteri Räty 2007-07-06 12:07:02 0000 ------- 
DLJ version is not released yet:
https://jdk-distros.dev.java.net/developer.html

------- Comment #2 From Andrei Ivanov 2007-07-10 07:46:31 0000 ------- 
They seem to be now...

------- Comment #3 From Marko Steinberger 2007-07-11 12:45:38 0000 ------- 
Details of three fixed security issues have been made public in the meantime.
These include the execution of arbitrary code.

Details can be found here:
http://research.eeye.com/html/advisories/published/AD20070705.html
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102993-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102997-1

------- Comment #4 From Marko Steinberger 2007-07-12 14:38:16 0000 ------- 
Created an attachment (id=124647) [edit]
sun-jdk-1.6.0.02 patch against sun-jdk-1.6.0.01.ebuild

Adding patch against sun-jdk-1.6.0.01.ebuild. Tested on x86, works for me. 

Removed author from header as I am no dev.

------- Comment #5 From Marko Steinberger 2007-07-12 14:38:28 0000 ------- 
Created an attachment (id=124649) [edit]
sun-jdk-1.6.0.02 patch against sun-jdk-1.6.0.01.ebuild

Adding patch against sun-jdk-1.6.0.01.ebuild. Tested on x86, works for me. 

Removed author from header as I am no dev.

------- Comment #6 From Marko Steinberger 2007-07-12 14:40:35 0000 ------- 
(From update of attachment 124647 [edit])
Redundant. Sorry for the spam.

------- Comment #7 From Petteri Räty 2007-07-12 14:44:15 0000 ------- 
(In reply to comment #5)
> Created an attachment (id=124649) [edit]
> sun-jdk-1.6.0.02 patch against sun-jdk-1.6.0.01.ebuild
> 
> Adding patch against sun-jdk-1.6.0.01.ebuild. Tested on x86, works for me. 
> 
> Removed author from header as I am no dev. 
> 

please use diff -u in the future

------- Comment #8 From Petteri Räty 2007-07-12 21:14:08 0000 ------- 
(In reply to comment #3)
> 
> Details can be found here:
> http://research.eeye.com/html/advisories/published/AD20070705.html
> http://sunsolve.sun.com/search/document.do?assetkey=1-26-102993-1
> http://sunsolve.sun.com/search/document.do?assetkey=1-26-102997-1
> 

sun-jdk, sun-jre-bin and emul-linux-x86-java bumped. Security: The last two
have stable keywords for 1.6 so please CC arches if you think there we should
push the latest version stable. At least the second link points to an issue
that is fixed in u2 (the first one was fixed in u1).

------- Comment #9 From Petteri Räty 2007-07-14 09:36:42 0000 ------- 
Well as other stuff than 1.6 is affected let's track this in bug 185256.
First Last Prev Next    No search results available      Search page      Enter new bug