pool/java-1_8_0-openjdk
SHA256
4
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

OBS-URL: https://build.opensuse.org/package/show/Java:Factory/java-1_8_0-openjdk?expand=0&rev=123

Browse Source
This commit is contained in:
Fridrich Strba 2015-10-22 12:29:31 +00:00 committed by Git OBS Bridge
parent bc9005e9eb
commit 550c356eec
1 changed files with 60 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

61
java-1_8_0-openjdk.changes
View File

@ -1,3 +1,62 @@
-------------------------------------------------------------------
Thu Oct 22 12:19:38 UTC 2015 - fstrba@suse.com
- Upgrade to upstream tag jdk8u65-b17
* Security fix release of October 21, 2015 (bsc#951376)
- Security issues fixed:
* CVE-2015-4734: A remote user can exploit a flaw in the Embedded
JGSS component to partially access data
* CVE-2015-4803: A remote user can exploit a flaw in the JRockit
JAXP component to cause partial denial of service conditions
* CVE-2015-4805: A remote user can exploit a flaw in the Embedded
Serialization component to gain elevated privileges
* CVE-2015-4806: A remote user can exploit a flaw in the Java SE
Embedded Libraries component to partially access and partially
modify data
* CVE-2015-4835: A remote user can exploit a flaw in the Embedded
CORBA component to gain elevated privileges
* CVE-2015-4842: A remote user can exploit a flaw in the Embedded
JAXP component to partially access data
* CVE-2015-4843: A remote user can exploit a flaw in the Java SE
Embedded Libraries component to gain elevated privileges
* CVE-2015-4844: A remote user can exploit a flaw in the Embedded
2D component to gain elevated privileges
* CVE-2015-4860: A remote user can exploit a flaw in the Embedded
RMI component to gain elevated privileges
* CVE-2015-4872: A remote user can exploit a flaw in the JRockit
Security component to partially modify data [].
* CVE-2015-4881: A remote user can exploit a flaw in the Embedded
CORBA component to gain elevated privileges
* CVE-2015-4882: A remote user can exploit a flaw in the Embedded
CORBA component to cause partial denial of service conditions
* CVE-2015-4883: A remote user can exploit a flaw in the Embedded
RMI component to gain elevated privileges
* CVE-2015-4893: A remote user can exploit a flaw in the JRockit
JAXP component to cause partial denial of service conditions
* CVE-2015-4902: A remote user can exploit a flaw in the Java SE
Deployment component to partially modify data
* CVE-2015-4903: A remote user can exploit a flaw in the Embedded
RMI component to partially access data
* CVE-2015-4911: A remote user can exploit a flaw in the JRockit
JAXP component to cause partial denial of service conditions
* CVE-2015-4810: A local user can exploit a flaw in the Java SE
Deployment component to gain elevated privileges
* CVE-2015-4840: A remote user can exploit a flaw in the Embedded
2D component to partially access data
* CVE-2015-4868: A remote user can exploit a flaw in the Java SE
Embedded Libraries component to gain elevated privileges
* CVE-2015-4901: A remote user can exploit a flaw in the JavaFX
component to gain elevated privileges
* CVE-2015-4906: A remote user can exploit a flaw in the JavaFX
component to partially access data
* CVE-2015-4908: A remote user can exploit a flaw in the JavaFX
component to partially access data
* CVE-2015-4916: A remote user can exploit a flaw in the JavaFX
component to partially access data
- Modified patch:
* s390-size_t.patch
- Account for an additional uintptr_t <-> size_t mismatch
-------------------------------------------------------------------
Wed Aug 19 08:12:09 UTC 2015 - fstrba@suse.com
@ -12,7 +71,7 @@ Wed Aug 19 08:12:09 UTC 2015 - fstrba@suse.com
- Fixed differently upstream
* applet-hole.patch
- Not needed any more with recent versions of icedtea-web
Modified patches
- Modified patches
* aarch64-misc.patch
- Rediff to correspond to the new context
- Added bits from aarch64-port/jdk8/jdk