Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 685480 - <dev-java/icedtea{,-bin}: 3.12.0: Multiple vulnerabilties
Summary: <dev-java/icedtea{,-bin}: 3.12.0: Multiple vulnerabilties
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
Whiteboard: ~2 [noglsa]
Depends on:
Reported: 2019-05-09 19:44 UTC by Andrew John Hughes
Modified: 2020-03-28 06:20 UTC (History)
1 user (show)

See Also:
Package list:
dev-java/icedtea-bin-3.12.0-r1 amd64 arm64 ppc64 x86 sys-apps/baselayout-java-0.1.0-r1 amd64 ppc64 x86
Runtime testing required: ---
stable-bot: sanity-check+


Note You need to log in before you can comment on or make changes to this bug.
Description Andrew John Hughes 2019-05-09 19:44:26 UTC

Updated IcedTea ebuild is in java-overlay.

Reproducible: Always
Comment 1 Georgy Yakovlev archtester gentoo-dev 2019-05-10 03:34:13 UTC
icedtea-3.12.0 imported to ::gentoo

building icedtea-bin now, might take a while for minor arches, but I'll try uploading x86 and amd64 within couple of hours.
Comment 2 Aaron Bauman (RETIRED) gentoo-dev 2019-05-10 03:49:30 UTC
Please let us know once the tree is clean of vulnerable ebuilds.
Comment 3 Larry the Git Cow gentoo-dev 2019-05-10 05:31:27 UTC
The bug has been referenced in the following commit(s):

commit 8ae7e3e56c75f90b80655c22359195db193cbddc
Author:     Georgy Yakovlev <>
AuthorDate: 2019-05-10 05:30:40 +0000
Commit:     Georgy Yakovlev <>
CommitDate: 2019-05-10 05:30:40 +0000

    dev-java/icedtea-bin: bump to 3.12.0, x86 and amd64 only
    Other arches will follow.
    Package-Manager: Portage-2.3.66, Repoman-2.3.12
    Signed-off-by: Georgy Yakovlev <>

 dev-java/icedtea-bin/Manifest                  |   6 +
 dev-java/icedtea-bin/icedtea-bin-3.12.0.ebuild | 161 +++++++++++++++++++++++++
 2 files changed, 167 insertions(+)
Comment 4 Georgy Yakovlev archtester gentoo-dev 2019-05-10 19:51:38 UTC
re-added ppc64 be and le
arm and arm64 will follow a bit later, takes a while to build =)

after I add all tarballs I'll request faststable.
Comment 5 Georgy Yakovlev archtester gentoo-dev 2019-06-01 22:47:08 UTC
arches please stabilize

there is no arm build for 3.12 as of now, please don't drop 3.10 yet, I'll drop it after I build 3.12 binpkg.
Comment 6 Georgy Yakovlev archtester gentoo-dev 2019-06-20 19:04:17 UTC
I missed adding arches to CC, fixing.
Comment 7 Agostino Sarubbo gentoo-dev 2019-06-21 08:03:28 UTC
amd64 stable
Comment 8 Agostino Sarubbo gentoo-dev 2019-06-21 11:08:09 UTC
x86 stable
Comment 9 Sergei Trofimovich (RETIRED) gentoo-dev 2019-06-22 10:33:51 UTC
ppc64 stable
Comment 10 Aaron Bauman (RETIRED) gentoo-dev 2019-07-22 02:52:19 UTC
arm64 stable
Comment 11 Georgy Yakovlev archtester gentoo-dev 2019-08-19 04:38:43 UTC
vulnerable versions cleaned up. this is obsolete in favor for
Comment 12 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-03-28 06:20:52 UTC
Tree is clean.