[slackware-security] java (jre, j2sdk) (SSA:2005-170-01)
Sun has released a couple of security advisories pertaining to
both the Java Runtime Environment and the Standard Edition
Development Kit. These could allow applets to read or write to
local files. For more details, Sun’s advisories may be found
here:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101748-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101749-1
Slackware repackage’s Sun’s Java(TM) binaries without changing
them, so the packages from Slackware -current should be used for
all glibc based Slackware versions.
Here are the details from the Slackware -current ChangeLog:
+————————–+
Sun Jun 19 21:45:07 PDT 2005
l/jre-1_5_0_03-i586-1.tgz: This already-issued package fixes some
recently announced security issues that could allow applets to read
or write to local files. See:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101748-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101749-1
(* Security fix *)
extra/j2sdk-1.5.0_03/j2sdk-1_5_0_03-i586-1.tgz: Fixed the
slack-desc
to not include the release version to prevent future mishaps.
🙂
This already-issued package fixes some recently announced
security
issues that could allow applets to read or write to local
files.
See:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101748-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101749-1
(* Security fix *)
+————————–+
Where to find the new packages:
Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, and
-current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/jre-1_5_0_03-i586-1.tgz
MD5 signatures:
5835b357ea9cb0d3587a163a98bcaeb3 jre-1_5_0_03-i586-1.tgz
9248ab96512ac91b589d338aa4af535c j2sdk-1_5_0_03-i586-1.tgz
Installation instructions:
Upgrade the package as root:
# upgradepkg jre-1_5_0_03-i586-1.tgz