<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="a0f07fdc9ce6bbfd4cc7ed1b99979b39"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="578">
  <id>dbg111-java-1_6_0-openjdk</id>
  <title>java-1_6_0-openjdk: Upgrade to 1.6.0 b14</title>
  <release>openSUSE 11.1</release>
  <issued date="1236094158"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=471829" id="471829" title="bug number 471829" type="bugzilla"/>
  </references>
  <description>OpenJDK Java 1.6.0 was upgraded to build b14, fixing quite
a lot of security issues.

It fixes at least: 4486841 UTF8 decoder should adhere to
corrigendum to Unicode 3.0.1 CVE-2008-5351 6484091
FileSystemView leaks directory info CVE-2008-5350 aka SUN
SOLVE 246266 6497740 Limit the size of RSA public keys
CVE-2008-5349 6588160 jaas krb5 client leaks OS-level UDP
sockets (all platforms) CVE-2008-5348 6592792 Add
com.sun.xml.internal to the &quot;package.access&quot; property in
$JAVA_HOME/lib/security/java.security CVE-2008-5347 aka SUN
SOLVE 246366 6721753 File.createTempFile produces guessable
file names CVE-2008-5360 6726779 ConvolveOp on USHORT
raster can cause the JVM crash. CVE-2008-5359 aka SUN SOLVE
244987 6733336 Crash on malformed font CVE-2008-5356 aka
SUN SOLVE 244987 6733959 Insufficient checks for
&quot;Main-Class&quot; manifest entry in JAR files CVE-2008-5354 aka
SUN SOLVE 244990 6734167 Calendar.readObject allows
elevation of privileges CVE-2008-5353 6751322 Vulnerability
report: Sun Java JRE TrueType Font Parsing Heap Overflow
CVE-2008-5357 aka SUN SOLVE 244987 6755943 Java JAR Pack200
Decompression should enforce stricter header checks
CVE-2008-5352 aka SUN SOLVE 244992 6766136 corrupted gif
image may cause crash in java splashscreen library.
CVE-2008-5358 aka SUN SOLVE 244987
</description>
  <pkglist>
    <collection>
        <package name="java-1_6_0-openjdk-debuginfo" arch="i586" version="1.4_b14" release="24.2.1">
          <filename>java-1_6_0-openjdk-debuginfo-1.4_b14-24.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-debuginfo" arch="ppc" version="1.4_b14" release="24.2.1">
          <filename>java-1_6_0-openjdk-debuginfo-1.4_b14-24.2.1.ppc.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-debuginfo" arch="x86_64" version="1.4_b14" release="24.2.1">
          <filename>java-1_6_0-openjdk-debuginfo-1.4_b14-24.2.1.x86_64.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-debugsource" arch="i586" version="1.4_b14" release="24.2.1">
          <filename>java-1_6_0-openjdk-debugsource-1.4_b14-24.2.1.i586.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-debugsource" arch="ppc" version="1.4_b14" release="24.2.1">
          <filename>java-1_6_0-openjdk-debugsource-1.4_b14-24.2.1.ppc.rpm</filename>
        </package>
        <package name="java-1_6_0-openjdk-debugsource" arch="x86_64" version="1.4_b14" release="24.2.1">
          <filename>java-1_6_0-openjdk-debugsource-1.4_b14-24.2.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
