Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 667920 - <dev-java/icedtea{,-bin}: 3.9.0: Multiple vulnerabilties
Summary: <dev-java/icedtea{,-bin}: 3.9.0: Multiple vulnerabilties
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Security
URL: http://blog.fuseyism.com/index.php/20...
Whiteboard: B3 [noglsa]
Keywords:
Depends on:
Blocks:
 
Reported: 2018-10-06 22:07 UTC by James Le Cuirot
Modified: 2019-08-20 20:17 UTC (History)
2 users (show)

See Also:
Package list:
dev-java/icedtea-bin-3.9.0-r1 amd64 ppc64 x86
Runtime testing required: ---
stable-bot: sanity-check+


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description James Le Cuirot gentoo-dev 2018-10-06 22:07:26 UTC
Bumps coming soon. Note the last one of these hasn't been closed out yet.
Comment 1 Larry the Git Cow gentoo-dev 2018-10-07 21:49:34 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a2bb18cff3517874f1b18afe535f7009f38e9b82

commit a2bb18cff3517874f1b18afe535f7009f38e9b82
Author:     James Le Cuirot <chewi@gentoo.org>
AuthorDate: 2018-10-07 21:48:32 +0000
Commit:     James Le Cuirot <chewi@gentoo.org>
CommitDate: 2018-10-07 21:49:20 +0000

    dev-java/icedtea: Remove vulnerable 3.8.0
    
    Bug: https://bugs.gentoo.org/667920
    Signed-off-by: James Le Cuirot <chewi@gentoo.org>
    Package-Manager: Portage-2.3.50, Repoman-2.3.10

 dev-java/icedtea/Manifest             |  11 -
 dev-java/icedtea/icedtea-3.8.0.ebuild | 417 ----------------------------------
 2 files changed, 428 deletions(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=cc257eb782057aec5788c4e53bbfc5e375ef8b91

commit cc257eb782057aec5788c4e53bbfc5e375ef8b91
Author:     James Le Cuirot <chewi@gentoo.org>
AuthorDate: 2018-10-07 21:47:24 +0000
Commit:     James Le Cuirot <chewi@gentoo.org>
CommitDate: 2018-10-07 21:49:19 +0000

    dev-java/icedtea-bin: Version bump to 3.9.0 with security fixes
    
    Bug: https://bugs.gentoo.org/667920
    Signed-off-by: James Le Cuirot <chewi@gentoo.org>
    Package-Manager: Portage-2.3.50, Repoman-2.3.10

 dev-java/icedtea-bin/Manifest                 |  14 +++
 dev-java/icedtea-bin/icedtea-bin-3.9.0.ebuild | 160 ++++++++++++++++++++++++++
 2 files changed, 174 insertions(+)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ddc142f9db08cbe69be19b60dbf386a8c6882672

commit ddc142f9db08cbe69be19b60dbf386a8c6882672
Author:     James Le Cuirot <chewi@gentoo.org>
AuthorDate: 2018-10-07 21:46:35 +0000
Commit:     James Le Cuirot <chewi@gentoo.org>
CommitDate: 2018-10-07 21:49:18 +0000

    dev-java/icedtea: Version bump to 3.9.0 with security fixes
    
    Bug: https://bugs.gentoo.org/667920
    Signed-off-by: James Le Cuirot <chewi@gentoo.org>
    Package-Manager: Portage-2.3.50, Repoman-2.3.10

 dev-java/icedtea/Manifest             |  11 +
 dev-java/icedtea/icedtea-3.9.0.ebuild | 391 ++++++++++++++++++++++++++++++++++
 2 files changed, 402 insertions(+)
Comment 2 James Le Cuirot gentoo-dev 2018-10-07 21:51:22 UTC
Bumped. Arch teams, please stabilise.
Comment 3 Mikle Kolyada (RETIRED) archtester Gentoo Infrastructure gentoo-dev Security 2018-10-08 09:14:49 UTC
amd64 stable
Comment 4 Thomas Deutschmann (RETIRED) gentoo-dev 2018-10-09 21:25:19 UTC
x86 stable
Comment 5 ernsteiswuerfel archtester 2018-10-16 18:12:54 UTC
Looking good on ppc64.

# cat icedtea-bin-667920.report 
USE tests started on Di 16. Okt 19:36:24 CEST 2018

FEATURES=' test' USE='' succeeded for =dev-java/icedtea-bin-3.9.0
USE='alsa -cups -doc examples gtk -headless-awt -nsplugin -pulseaudio -source -webstart' succeeded for =dev-java/icedtea-bin-3.9.0
USE='alsa -cups doc examples gtk -headless-awt -nsplugin -pulseaudio -source -webstart' succeeded for =dev-java/icedtea-bin-3.9.0
USE='-alsa -cups doc examples gtk -headless-awt nsplugin -pulseaudio -source -webstart' succeeded for =dev-java/icedtea-bin-3.9.0
USE='-alsa -cups doc examples -gtk -headless-awt nsplugin pulseaudio -source -webstart' succeeded for =dev-java/icedtea-bin-3.9.0
USE='-alsa -cups -doc examples gtk -headless-awt nsplugin pulseaudio -source -webstart' succeeded for =dev-java/icedtea-bin-3.9.0
USE='-alsa cups doc -examples -gtk -headless-awt -nsplugin pulseaudio source -webstart' succeeded for =dev-java/icedtea-bin-3.9.0
USE='alsa cups doc -examples gtk -headless-awt -nsplugin pulseaudio source -webstart' succeeded for =dev-java/icedtea-bin-3.9.0
USE='-alsa -cups doc examples -gtk headless-awt -nsplugin pulseaudio -source webstart' succeeded for =dev-java/icedtea-bin-3.9.0
USE='alsa cups -doc examples -gtk headless-awt -nsplugin -pulseaudio source webstart' succeeded for =dev-java/icedtea-bin-3.9.0
USE='-alsa cups doc examples -gtk headless-awt -nsplugin -pulseaudio source webstart' succeeded for =dev-java/icedtea-bin-3.9.0
USE='-alsa -cups -doc examples -gtk -headless-awt nsplugin -pulseaudio source webstart' succeeded for =dev-java/icedtea-bin-3.9.0
USE='alsa cups doc -examples gtk -headless-awt -nsplugin pulseaudio source webstart' succeeded for =dev-java/icedtea-bin-3.9.0

revdep tests started on Di 16. Okt 20:07:38 CEST 2018

FEATURES=' test' USE='' succeeded for virtual/jdk
Comment 6 James Le Cuirot gentoo-dev 2018-10-21 19:38:40 UTC
I've bumped to -r1 for x86 (already stabilized) but the other arches are unchanged in this revision.
Comment 7 Sergei Trofimovich (RETIRED) gentoo-dev 2018-11-08 08:04:41 UTC
ppc64 stable
Comment 8 Larry the Git Cow gentoo-dev 2018-11-08 22:05:11 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a8b1e03f692e932c4ba7cc66e64d180291446a6a

commit a8b1e03f692e932c4ba7cc66e64d180291446a6a
Author:     James Le Cuirot <chewi@gentoo.org>
AuthorDate: 2018-11-08 22:04:08 +0000
Commit:     James Le Cuirot <chewi@gentoo.org>
CommitDate: 2018-11-08 22:05:01 +0000

    dev-java/icedtea-bin: Drop old and vulnerable 3.8.0
    
    Bug: https://bugs.gentoo.org/667920
    Signed-off-by: James Le Cuirot <chewi@gentoo.org>
    Package-Manager: Portage-2.3.51, Repoman-2.3.11

 dev-java/icedtea-bin/Manifest                 |  14 ---
 dev-java/icedtea-bin/icedtea-bin-3.8.0.ebuild | 160 --------------------------
 2 files changed, 174 deletions(-)