sun-java6 6.22-0ubuntu1~9.10.1 source package in Ubuntu

Changelog

sun-java6 (6.22-0ubuntu1~9.10.1) karmic-security; urgency=low

  * SECURITY UPDATE: multiple upstream vulnerabilities. Upstream fixes:
    - (CVE-2010-3556): JDK unspecified vulnerability in 2D component
    - (CVE-2010-3562): JDK IndexColorModel double-free
    - (CVE-2010-3565): JDK JPEG writeImage remote code execution
    - (CVE-2010-3566): JDK ICC Profile remote code execution
    - (CVE-2010-3567): Crash in ICU Opentype layout engine due to mismatch in
                       character counts
    - (CVE-2010-3571): JDK unspecified vulnerability in 2D component
    - (CVE-2010-3554): JDK corba reflection vulnerabilities
    - (CVE-2010-3563): JDK unspecified vulnerability in Deployment component
    - (CVE-2010-3568): JDK Deserialization Race condition
    - (CVE-2010-3569): JDK Serialization inconsistencies
    - (CVE-2010-3558): JDK unspecified vulnerability in Java Web Start component
    - (CVE-2010-3552): JDK unspecified vulnerability in New Java Plugin
                       component
    - (CVE-2010-3559): JDK unspecified vulnerability in Sound component
    - (CVE-2010-3572): JDK unspecified vulnerability in Sound component
    - (CVE-2010-3553): UIDefault.ProxyLazyValue has unsafe reflection usage
    - (CVE-2010-3555): JDK unspecified vulnerability in Deployment component
    - (CVE-2010-3550): JDK unspecified vulnerability in Java Web Start component
    - (CVE-2010-3570): JDK unspecified vulnerability in Deployment Toolkit
    - (CVE-2010-3561): Privileged ServerSocket.accept allows receiving
                       connections from any host
    - (CVE-2009-3555): TLS: MITM attacks via session renegotiation
    - (CVE-2010-1321): krb5: null pointer dereference in GSS-API library leads
                       to DoS
    - (CVE-2010-3549): HttpURLConnection chunked encoding issue (Http request
                       splitting)
    - (CVE-2010-3557): JDK Swing mutable static
    - (CVE-2010-3541): limit setting of some request headers in
                       HttpURLConnection
    - (CVE-2010-3573): limit HTTP request cookie headers in HttpURLConnection
    - (CVE-2010-3574): limit use of TRACE method in HttpURLConnection
    - (CVE-2010-3548): JDK DNS server IP address information leak
    - (CVE-2010-3551): NetworkInterface reveals local network address to
                       untrusted code
    - (CVE-2010-3560): JDK unspecified vulnerability in Networking component

sun-java6 (6.21-1ubuntu1) maverick; urgency=low

  * Update Debian packaging to r12837.

sun-java6 (6.21-1) unstable; urgency=low

  * New upstream release
    - There are no security fixes in this release.
  * Update $(bin_pattern) and $(diff_ignore) in debian/rules.
  * Add a lintian override for embedded-libjpeg.
  * Update danish debconf translation; thanks to Joe Dalton. (Closes: #586238)
  * Update japanese debconf translation; thanks to Hideki Yamane.
    (Closes: #580157)
  * Add midori as an alternative to $(browsers) in debian/rules.
    (Closes: #588663)

sun-java6 (6.20-dlj-4) unstable; urgency=low

  * Remove wrong space character for uming.ttc path in fontconfig.properties.
    Thanks to Alberto Alvarez García.

sun-java6 (6.20-dlj-3) unstable; urgency=low

  * Change Vcs-Svn header to allow anonymous access. (Closes: #478673)
  * Add Recommends: ia32-libs-gtk to package ia32-sun-java6-bin.
    (Closes: #532359)
  * Add a some information to README.Debian that explains how to enable the
    plugin in Iceweasel. (Closes: #541154)
  * Add myself to Uploaders.
  * Add missing changelog entry for CVE-2010-0087 to version 6.19-0ubuntu1.
  * Add missing changelog entry for CVE-2010-1423 to version 6.20-1.

sun-java6 (6.20-dlj-2) unstable; urgency=low

  * Team upload.
  * Update Homepage in d/control.
  * Update italian and spanish debconf translation. (Closes: #560354, #570790)
  * Switch to source format 3.0.
  * Remove files for the old -doc package since we Suggests: openjdk-6-doc.
  * Clean up README.Debian and add some information about using dpkg-divert
    before manually installing JCE policy files. (Closes: #578578)

sun-java6 (6.20dlj-1ubuntu3) lucid; urgency=low

  * Fix java-launcher in java.desktop file. LP: #568707.

sun-java6 (6.20dlj-1ubuntu2) lucid; urgency=low

  * Repack using the binaries from https://jdk-distros.dev.java.net/developer.html.
 -- Matthias Klose <email address hidden>   Fri, 15 Oct 2010 16:05:20 +0200