Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 589208 (CVE-2016-3458, CVE-2016-3485, CVE-2016-3498, CVE-2016-3500, CVE-2016-3503, CVE-2016-3508, CVE-2016-3511, CVE-2016-352, CVE-2016-3550, CVE-2016-3587, CVE-2016-3598, CVE-2016-3606, CVE-2016-3610) - <dev-java/oracle-{jdk,jre}-bin-1.8.0.101: multiple vulnerabilities
Summary: <dev-java/oracle-{jdk,jre}-bin-1.8.0.101: multiple vulnerabilities
Status: RESOLVED FIXED
Alias: CVE-2016-3458, CVE-2016-3485, CVE-2016-3498, CVE-2016-3500, CVE-2016-3503, CVE-2016-3508, CVE-2016-3511, CVE-2016-352, CVE-2016-3550, CVE-2016-3587, CVE-2016-3598, CVE-2016-3606, CVE-2016-3610
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Security
URL:
Whiteboard: A2 [glsa cve cleanup]
Keywords:
: 589206 (view as bug list)
Depends on:
Blocks:
 
Reported: 2016-07-20 08:14 UTC by Agostino Sarubbo
Modified: 2016-10-15 12:33 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Comment 1 James Le Cuirot gentoo-dev 2016-07-27 22:21:10 UTC 
Versions bumped. Sorry for the wait, I was away.

amd64 and x86 teams, please stabilize:
dev-java/oracle-jdk-bin-1.8.0.102
dev-java/oracle-jre-bin-1.8.0.102
Comment 2 Agostino Sarubbo gentoo-dev 2016-07-28 08:45:21 UTC 
amd64 stable
Comment 3 James Le Cuirot gentoo-dev 2016-07-28 09:34:57 UTC 
Please don't mess with the version number in the title, this is what led to monsieurp wrongly deleting the only version available to arm(64). 1.8.0.101 and 1.8.0.102 are both new releases and neither are vulnerable. We include 1.8.0.101 because 1.8.0.102 is not available to arm(64). We don't stabilise for arm(64) at the moment so 1.8.0.101 was not included in the list above.
Comment 4 Agostino Sarubbo gentoo-dev 2016-07-28 14:10:33 UTC 
x86 stable.

Maintainer(s), please cleanup.
Security, please add it to the existing request, or file a new one.
Comment 5 James Le Cuirot gentoo-dev 2016-07-28 14:28:06 UTC 
Thanks! Old removed. Security team, please continue.
Comment 6 Mike Limansky 2016-07-28 16:54:18 UTC 
*** Bug 589206 has been marked as a duplicate of this bug. ***
Comment 7 Yury German Gentoo Infrastructure gentoo-dev 2016-09-10 06:12:13 UTC 
Added to an existing GLSA Request.
Comment 8 GLSAMaker/CVETool Bot gentoo-dev 2016-10-15 12:19:05 UTC 
This issue was resolved and addressed in
 GLSA 201610-08 at https://security.gentoo.org/glsa/201610-08
by GLSA coordinator Aaron Bauman (b-man).
Comment 9 Aaron Bauman (RETIRED) gentoo-dev 2016-10-15 12:21:14 UTC 
Reopening for cleanup.

@maintainer(s), please cleanup:

=dev-java/oracle-jdk-bin-1.8.0.101
Comment 10 James Le Cuirot gentoo-dev 2016-10-15 12:33:04 UTC 
Gah, did anyone actually read what I wrote above? STOP screwing around with the version number, 101 is fine.