==========================================================Ubuntu Security Notice USN-1052-1          January 26, 2011
openjdk-6, openjdk-6b18 vulnerability
CVE-2010-4351
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 9.10
Ubuntu 10.04 LTS
Ubuntu 10.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 9.10:
  icedtea6-plugin                 6b20-1.9.4-0ubuntu1~9.10.1

Ubuntu 10.04 LTS:
  icedtea6-plugin                 6b20-1.9.4-0ubuntu1~10.04.1

Ubuntu 10.10:
  icedtea6-plugin                 6b20-1.9.4-0ubuntu1

After a standard system update you need to restart any Java services,
applications or applets to make all the necessary changes.

Details follow:

It was discovered that the JNLP SecurityManager in IcedTea for Java
OpenJDK in some instances failed to properly apply the intended
scurity policy in its checkPermission method. This could allow an
attacker execute code with privileges that should have been prevented.
(CVE-2010-4351)


Updated packages for Ubuntu 9.10:

  Source archives:

          Size/MD5:   130597 b695702ffabdff2b295120905ba07780
          Size/MD5:     3018 3a15ba89ac3d8ec43057f1b4ee263084
          Size/MD5: 73205024 b8a99377ee01bc543e73c21caba0e16d
          Size/MD5:   145537 250716e800eb500cc236ef9e3d6ddfe8
          Size/MD5:     2997 dfa9f1ba1c76ff9792ce88f8176aadd4
          Size/MD5: 71375187 36e126c797818b9385d8ac48136782de

  Architecture independent packages:

          Size/MD5: 19978228 422aad6ce9714e8d521f054f005a5c2e
          Size/MD5:  6168100 92e1760d6f8727947750fad6a05a8d38
          Size/MD5: 26856742 2ab559527abf492ca1db334e09e0052a

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   432714 06150a87d0deb18514098c4fd4d914c5
          Size/MD5:    83638 697efc67d953f29ecdfe2d02452edb70
          Size/MD5: 119549160 f846ad33ad1efcad3a08d8f64f334b3a
          Size/MD5:  2364520 194534ae02377afe4b7667743ba6dbac
          Size/MD5: 10860680 04143fe33c016f8178f9303bc188e286
          Size/MD5: 25605026 ef8eb5491f617666154924cd115367ee
          Size/MD5:   270650 c228dc2ad44c587c1b3f10e9064bbd98
          Size/MD5:  5569110 a277a5d2676e1d2c045b03c087bbedf0

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   417736 0e878b1628c73c7c99f28f1eb151ca3c
          Size/MD5:    79226 4383c7addee3d356603e0837bd8edd34
          Size/MD5: 172916362 568b5697863394351ccecdec006c23cf
          Size/MD5:  2351096 6e3bfaaf5c310cfb46b4a1c7d1d10fdf
          Size/MD5: 10856596 08eb639e66519a4d0d571e5b30d5a3bb
          Size/MD5: 27430492 0b5af8c32b619ffaa3a0d6ee37c2fa46
          Size/MD5:   255780 6f2a3c9aea61cf6c576b9c61514e076b
          Size/MD5:  5065888 85a7586e7824b00c58f5b4d4b6ac33f1

  armel architecture (ARM Architecture):

          Size/MD5:   368846 f81b4540b71594d802852020ce646096
          Size/MD5:    75722 e670c5b5981c5901dd085e7651448a94
          Size/MD5: 84842948 8361a6f9e6231672ef32992eea4597fc
          Size/MD5:  1539400 8c1ec6795afa5ef42e478dbfcc2d0316
          Size/MD5:  9133102 b02c535f780c31fd6702abaa468682b8
          Size/MD5: 29652936 4e1e9e8030f67de8cf5cfc4caf70db18
          Size/MD5:   255110 6b1600d685d0d5a9fd90f4b740a6a844
          Size/MD5:  4829230 184f0bfd6fba72da6b78ab9746535799

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:   421892 db6fcb4d53469cf022a2c7560db977cb
          Size/MD5:    81880 179913aee2be19d9f4673cd043940145
          Size/MD5: 173092350 76914ccc202b7e5c012f7b57957e86a3
          Size/MD5:  2348184 95134579b45af727d477b1ff9f443579
          Size/MD5: 10854986 f02c0f817904a8dea681811e86f69c59
          Size/MD5: 27471896 254f8b8bc4a288fc56164ee15f78471a
          Size/MD5:   251910 0f2b84ba610de80440e9263e4080b714
          Size/MD5:  5056652 7e2b664c4006017315810848e5553ac7

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   447796 84a4013777457f385a15e2ac80f54a33
          Size/MD5:    82942 a5e523c36d87d3696b0f868ad5726d1f
          Size/MD5: 103606780 ee60b2694b34ebeebdc3c7e07345c103
          Size/MD5:  2365518 4f7cbbe5b76431f2fc304b3b94365bda
          Size/MD5:  8794474 8c0450258cc247392b2dbc2a1120dd66
          Size/MD5: 23938350 915b33b21ab0f9d9f4fd50560891804f
          Size/MD5:   275128 e3c013a86c1d51a7cbc352f7655c6253
          Size/MD5:  4885648 caeff281e74b082cccb41212e6901e28

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:    79626 9679be0151c71f39caa4b368e8a74ae5
          Size/MD5: 119171956 9f9e6e917794d15d79c72160db26b533
          Size/MD5:  2364756 7e95f96505c3dd1abf82132777f7c173
          Size/MD5: 10849918 b28f3d7711e826d7ec99d74c65b9e1fb
          Size/MD5: 27295162 7904b8d918a84fa9924989fc8049aead
          Size/MD5:   256828 2652fffbcfc375427f645706e3a7c879

Updated packages for Ubuntu 10.04 LTS:

  Source archives:

          Size/MD5:   130615 b6bd90a6a401bec50e8bf9900852113b
          Size/MD5:     3077 0166e34134c4a1f1e3e4e006705f9b5c
          Size/MD5: 73205024 b8a99377ee01bc543e73c21caba0e16d
          Size/MD5:   142566 9fca90a013d88bd6c0baebcdecd01283
          Size/MD5:     3056 8f97f5c3302d0cd0b5abff9ab17415b9
          Size/MD5: 71375187 36e126c797818b9385d8ac48136782de

  Architecture independent packages:

          Size/MD5: 19979314 4afe2c607870d79afbe45d43d9bf7518
          Size/MD5:  6155002 7192f4d62705365b6eecda8610ec8a0c
          Size/MD5: 26856834 aeec7d9e74d6103fe0df7a5330e8a299

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   433840 2b05bb40c617cc5daac9962e360b52cd
          Size/MD5:    84118 66fe0693363bb4861bf0e358fd370f5f
          Size/MD5: 119279526 8dd3237562e9f52f0edd1e542b115f8d
          Size/MD5:  2384976 f8ce59f523828e5546d3a3c93e04ecc2
          Size/MD5: 11089572 f5d16f73a41a1c2a68ffc7d320cff3f7
          Size/MD5: 25608218 d6fc2ab1af28fdbae6701f39fb698708
          Size/MD5:   270698 b73e9ce7ae7f95c8c304a06ec8d2ffe2
          Size/MD5:  2241112 1473690aeccd4c2f11d0fcd5b1814be7

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   415026 08a2ef07f48918896ff62c1b187c67dc
          Size/MD5:    79606 f8b37228249bdf386bc110cebab0f43a
          Size/MD5: 172629398 f5ae1bccb05d5108204a492e2c2dfdb4
          Size/MD5:  2351246 6f16456544307bd8f81aad2f3ab3bf51
          Size/MD5: 10861662 93bf561a819e64ac81dc15e9ef77001d
          Size/MD5: 27443904 c93aad9b19ab0188be20434e8efd8ab7
          Size/MD5:   255890 264e22c08be83ba6d97415dc354f1bc8
          Size/MD5:  1924656 a92979571f90681d3799c7488b5d9a26

  armel architecture (ARM Architecture):

          Size/MD5:   346664 9fdd53b6e0f3f61620a9c2b294bd3f95
          Size/MD5:    73842 55dc01a14cc3b296d0eb1bdfb6ade036
          Size/MD5: 41198312 318635c7b32be359a777229292747519
          Size/MD5:  1531888 4b9fe25b1af3cc4a2f7818265b4379de
          Size/MD5:  9099906 4d0ee34e8ec9fd9b0e713f5b098f1352
          Size/MD5: 29491572 a8c291a87bb9e2479c70be08c88c363a
          Size/MD5:   245500 30be2990ead0e427454218b9c6d65e6a

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   445224 ce4e78f319b70d2f1df3900e05c411cd
          Size/MD5:    83640 7c773091f227e91b29e96635857efde9
          Size/MD5: 103332154 1f562f081adc47c05f09d82d01fbd6b4
          Size/MD5:  2365520 84210dbf9b7329e8caff4310d3a88eb9
          Size/MD5:  8797702 d85467930800592e05b2a282e1a33859
          Size/MD5: 23945208 8a997551d02209985774c29d9ae40b9c
          Size/MD5:   275060 877464f0086b7b789d14a60f75b9d555
          Size/MD5:  2052770 8941c8fad525dc800b5bb3a3eb996a7d

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:    77766 8904dbb004feb819fc93a9ddedeb12b7
          Size/MD5: 119143882 8272c1380527678f946dea322338f39f
          Size/MD5:  2365938 c82e3de44adaa58467b82e8bdaa6712a
          Size/MD5: 10887646 f2a20a529e6fde44c71b549da5bcfedd
          Size/MD5: 27222008 7669808aa7a309f18c0665e04eda9ac4
          Size/MD5:   257358 73fc6a08d7bddcfbdfb15106b232ad9b

Updated packages for Ubuntu 10.10:

  Source archives:

          Size/MD5:   133056 10794bed25e76de762b5a6013efb7bfb
          Size/MD5:     3004 84822e8c3b67d11a9ea7b77ec4c4be6c
          Size/MD5: 73205024 b8a99377ee01bc543e73c21caba0e16d

  Architecture independent packages:

          Size/MD5: 20560414 adccea7c07b47706716441de1b2b7960
          Size/MD5:  6198080 7bb094f5f8acb88d75a45683d06b47f9
          Size/MD5: 26918584 e7a895d3f8146c053d41f19e41264aef

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   433214 b3dc811c6ed3272fdd567342d5a7bd25
          Size/MD5:    83388 0f013945085d8fe2927975c86ecaaa28
          Size/MD5: 119319814 5a84a9c0461102944b8aef8abf80bca9
          Size/MD5:  2380032 2ac0c3da98c090a92901265ceb1e13cc
          Size/MD5: 11085872 3a0287b7651661504ee9a0f034845925
          Size/MD5: 25604368 89764dae34fc714f21b4ecf56101de95
          Size/MD5:   266964 ba739697a2faa2c804f41db432c67522
          Size/MD5:  2242484 5c58ba505f2620236a150d7982db4552

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   416420 952da0087dff23c9d506e2e8f52ed55c
          Size/MD5:    78710 387d43b67bc1ba87478ef27492a94b59
          Size/MD5: 172653602 0a6f5cbdd65132083a47d9c251beacaa
          Size/MD5:  2356262 6cb61ff8dc133f166495bbb6ae2e2faf
          Size/MD5: 11080452 d47d6f498708d208d7b22a54b45ea9e8
          Size/MD5: 27421556 c899c88933019eefbf8e77b5356f44be
          Size/MD5:   251678 d5410671a33d9a218f05ee821be0a1ab
          Size/MD5:  1922668 7c4783742dd642915e28c72f78341a42

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   444494 03c4565dc7030f2cd69956c3cadfaa10
          Size/MD5:    82770 efa706349e0e5a01bb84aea4437da816
          Size/MD5: 103362636 f5bc1d9f7082d8f72c80dc6824983c82
          Size/MD5:  2363338 e3b4db64088ed8dae7a28cd211c9c143
          Size/MD5:  8792488 8c6ef8553f64ff9a99020608d363f8f6
          Size/MD5: 23929210 1686eceea02d58e58aee8a932253dc99
          Size/MD5:   270456 3186e3a24ba16d62bca1fb14ed03cf86
          Size/MD5:  2052600 50cd92abdcfbdee29651634131b9b9c0

Ubuntu 1052-1: OpenJDK vulnerability

January 26, 2011
It was discovered that the JNLP SecurityManager in IcedTea for JavaOpenJDK in some instances failed to properly apply the intendedscurity policy in its checkPermission method

Summary

Update Instructions

References

Severity
openjdk-6, openjdk-6b18 vulnerability

Package Information

Related News

4.Lock AbstractDigital Esm H320
2 - 3 min read
Tails 6.2 is a new Linux distribution release that expands its multilingual support and improves security features. The distribution is a
19.Laptop Bed Esm H320
2 - 3 min read
AlmaLinux 9.4 beta has been released and provides compelling reasons to consider it for desktop usage. While AlmaLinux is primarily known as a
32.Lock Code Circular Esm H320
2 - 3 min read
Linux admins and security practitioners face significant challenges in keeping their Linux systems secure amidst the constant threat of kernel bugs.
1.Penguin Landscape Esm H320
2 - 3 min read
A significant security threat, known as the Spectre v2 exploit, has been observed targeting Linux systems running on modern Intel processors. Let's
10.FingerPrint Locks Esm H320
2 - 3 min read
The recent release of I2P 2.5.0 , an anonymous P2P network that protects against online censorship, surveillance, and monitoring, has brought a slew
24.Key Code Esm H320
2 - 3 min read
The Akira ransomware group has extorted approximately $42 million from over 250 victims since January 1, 2024. The group initially focused on
5.ShakingHands Esm H320
2 - 3 min read
At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux
30.Lock Globe Motherboard Esm H320
1 - 2 min read
The SPDX 3.0 release marks a significant milestone in software management, particularly for Linux admins, infosec professionals, internet security
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved