Ubuntu
openjdk-7 package

openjdk-7 7u121-2.6.8-1ubuntu0.12.04.3 source package in Ubuntu

Changelog

openjdk-7 (7u121-2.6.8-1ubuntu0.12.04.3) precise-security; urgency=medium

  * Backport to 12.04

openjdk-7 (7u121-2.6.8-1ubuntu0.14.04.3) trusty-security; urgency=medium

  * Security fixes from 8u121:
    - S8167104, CVE-2017-3289: Custom class constructor code can bypass the
      required call to super.init allowing for uninitialized objects to be
      created.
    - S8164143, CVE-2017-3260: It is possible to corrupt memory by calling
      dispose() on a CMenuComponentmultiple times.
    - S8168714, CVE-2016-5546: ECDSA will accept signatures that have various
      extraneous bytes added to them whereas the signature is supposed to be
      unique.
    - S8166988, CVE-2017-3253: The PNG specification allows the [iz}Txt
      sections to be 2^32-1 bytes long so these should not be uncompressed
      unless the user explicitly requests it.
    - S8168728, CVE-2016-5548: DSA signing exhibits a timing bias that may
      leak information about k.
    - S8161743, CVE-2017-3252: LdapLoginModule incorrectly tries to
      deserialize responses from an LDAP server when an LDAP context is
      expected.
    - S8167223, CVE-2016-5552: Parsing of URLs can be inconsistent with how
      users or external applications would interpret them leading to possible
      security issues.
    - S8168705, CVE-2016-5547: A value from an InputStream is read directly
      into the size argument of a new byte[] without validation.
    - S8164147, CVE-2017-3261: An integer overflow exists in
      SocketOutputStream which can lead to memorydisclosure.
    - S8151934, CVE-2017-3231: Under some circumstances URLClassLoader will
      dispatch HTTP GET requests where the invoker does not have permission.
    - S8165071, CVE-2016-2183: 3DES can be exploited for block collisions when
      long running sessions are allowed.
    - S8165344, CVE-2017-3272: A protected field can be leveraged into type
      confusion.
    - S8156802, CVE-2017-3241: RMI deserialization should limit the types
      deserialized to prevent attacks that could escape the sandbox.

 -- Tiago Stürmer Daitx <email address hidden>  Tue, 07 Feb 2017 17:56:10 +0000

Upload details

Uploaded by:
Tiago Stürmer Daitx
Uploaded to:
Precise
Original maintainer:
OpenJDK
Architectures:
alpha amd64 armel armhf arm64 i386 ia64 lpia mips mipsel mips64 mips64el powerpc powerpcspe ppc64 ppc64el m68k sh4 sparc sparc64 s390x x32 kfreebsd-i386 kfreebsd-amd64 all s390
Section:
java
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Precise updates universe java
Precise security universe java

Downloads

File Size SHA-256 Checksum
openjdk-7_7u121-2.6.8.orig.tar.gz 51.4 MiB 04794485b765c6ee453668a7e01a82659378c0bd8a4e85e58979fe5256e50a3b
openjdk-7_7u121-2.6.8-1ubuntu0.12.04.3.debian.tar.xz 206.0 KiB c6f678f1bea2c9a43ee8e05d89db7b652c05859d4cce37534dcd3ab26033e7e6
openjdk-7_7u121-2.6.8-1ubuntu0.12.04.3.dsc 4.8 KiB faf1079327bd33b9629de800ea7d5981c64fd40b7da38401497a5517441897b6

View changes file

Binary packages built by this source

icedtea-7-jre-cacao: Transitional package for obsolete Cacao JVM for OpenJDK

 Cacao support was removed for recent versions of OpenJDK 7.
 .
 This is a transitional package which can be safely removed.

icedtea-7-jre-jamvm: Alternative JVM for OpenJDK, using JamVM

 The package provides an alternative runtime using the JamVM. This is a
 somewhat faster alternative than the Zero port on architectures like armel,
 mips, mipsel, powerpc.
 .
 The VM is started with the option `-jamvm'. See the README.Debian for details.

openjdk-7-dbg: Java runtime based on OpenJDK (debugging symbols)

 OpenJDK is a development environment for building applications,
 applets, and components using the Java programming language.
 .
 This package contains the debugging symbols.
 .
 The packages are built using the IcedTea build support and patches
 from the IcedTea project.

openjdk-7-demo: Java runtime based on OpenJDK (demos and examples)

 OpenJDK Java runtime
 .
 The packages are built using the IcedTea build support and patches
 from the IcedTea project.

openjdk-7-doc: OpenJDK Development Kit (JDK) documentation

 OpenJDK is a development environment for building applications,
 applets, and components using the Java programming language.
 .
 This package contains the API documentation.
 .
 The packages are built using the IcedTea build support and patches
 from the IcedTea project.

openjdk-7-jdk: OpenJDK Development Kit (JDK)

 OpenJDK is a development environment for building applications,
 applets, and components using the Java programming language.
 .
 The packages are built using the IcedTea build support and patches
 from the IcedTea project.

openjdk-7-jre: OpenJDK Java runtime, using Hotspot Zero

 Full Java runtime environment - needed for executing Java GUI and Webstart
 programs, using Hotspot Zero.
 The packages are built using the IcedTea build support and patches
 from the IcedTea project.

openjdk-7-jre-headless: OpenJDK Java runtime, using Hotspot Zero (headless)

 Minimal Java runtime - needed for executing non GUI Java programs,
 using Hotspot Zero.
 The packages are built using the IcedTea build support and patches
 from the IcedTea project.

openjdk-7-jre-lib: OpenJDK Java runtime (architecture independent libraries)

 OpenJDK Java runtime, using Hotspot JIT.
 The packages are built using the IcedTea build support and patches
 from the IcedTea project.
 .
 This is a transitional package. You can safely remove it.

openjdk-7-jre-zero: Alternative JVM for OpenJDK, using Zero/Shark

 The package provides an alternative runtime using the Zero VM and the
 Shark Just In Time Compiler (JIT). Built on architectures in addition
 to the Hotspot VM as a debugging aid for those architectures which don't
 have a Hotspot VM.
 .
 The VM is started with the option `-zero'. See the README.Debian for details.

openjdk-7-source: OpenJDK Development Kit (JDK) source files

 OpenJDK is a development environment for building applications,
 applets, and components using the Java programming language.
 .
 This package contains the Java programming language source files
 (src.zip) for all classes that make up the Java core API.
 .
 The packages are built using the IcedTea build support and patches
 from the IcedTea project.