dbg111-java-1_6_0-openjdk openSUSE 11.1 The XML signature checker did not impose limits on the minimum length of HMAC signatures in XML documentes. Attackers could therefore specify a length of e.g. 1 to make the signature appear valid and therefore effectively bypass verification of XML documents. (CVE-2009-0217) The WebStart component does not allow to run unsigned code in some cases. (CVE-2009-1896) A null pointer dereference was fixed in the LittleCMS component. (CVE-2009-0793) java-1_6_0-openjdk-debuginfo-1.5.1_b16-0.1.2.i586.rpm java-1_6_0-openjdk-debuginfo-1.5.1_b16-0.1.2.ppc.rpm java-1_6_0-openjdk-debuginfo-1.5.1_b16-0.1.2.x86_64.rpm java-1_6_0-openjdk-debugsource-1.5.1_b16-0.1.2.i586.rpm java-1_6_0-openjdk-debugsource-1.5.1_b16-0.1.2.ppc.rpm java-1_6_0-openjdk-debugsource-1.5.1_b16-0.1.2.x86_64.rpm