Bug 421031 – <dev-java/icedtea{,-bin}-{6.1.11.3,7.2.2.1}: multiple vulnerabilities (CVE-2012-{1711,1717,1716,1713,1719,1718,1723,1724,1725,1726})

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Andrew John Hughes 2012-06-13 20:22:42 UTC]

New IcedTea security releases are available:

http://blog.fuseyism.com/index.php/2012/06/12/security-icedtea6-1-10-8-1-11-3-released/
http://blog.fuseyism.com/index.php/2012/06/13/security-icedtea-2-1-1-2-2-1-released/

The builds in dev-java/icedtea all need replacing with those from java-overlay.

Note that CVE-2012-1726 only affects IcedTea 2.x.

[Comment 1 Sean Amoss (RETIRED) 2012-06-15 14:10:48 UTC]

Thanks for the report, Andrew.

[Comment 2 Vlastimil Babka (Caster) (RETIRED) 2012-06-16 17:15:34 UTC]

Please stabilize dev-java/icedtea-bin-6.1.11.3

[Comment 3 Jeff (JD) Horelick (RETIRED) 2012-06-17 06:24:09 UTC]

x86 stable

[Comment 4 Agostino Sarubbo 2012-06-17 12:33:23 UTC]

(In reply to comment #2)
> Please stabilize dev-java/icedtea-bin-6.1.11.3

Please hide QA notice for ldflags

[Comment 5 Agostino Sarubbo 2012-06-17 15:01:56 UTC]

amd64 stable

[Comment 6 Sean Amoss (RETIRED) 2012-06-18 22:53:15 UTC]

Adding to existing GLSA draft (icedtea-bin). 

Reverting back to [ebuild] state while we wait for updated dev-java/icedtea.

[Comment 7 Ralph Sennhauser (RETIRED) 2012-06-19 21:05:42 UTC]

Updated ebuilds are now in tree. Thanks to Andrew for the ebuilds and the extra effort spent on cacao.

[Comment 8 Sean Amoss (RETIRED) 2012-06-22 19:32:31 UTC]

Thanks, everyone.

GLSA draft ready for review.

[Comment 9 James Le Cuirot 2015-05-10 21:37:10 UTC]

I'm just going to close this since no one cares. These versions have long gone.