openjdk team mailing list archive

[Launchpad Bug Tracker <272010@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package openjdk-6 - 6b14-1.4.1-0ubuntu5

---------------
openjdk-6 (6b14-1.4.1-0ubuntu5) jaunty; urgency=low

  [Matthias Klose]
  * Update to the final CACAO 0.99.4 release.
  * Security Vulnerability Fixes for OpenJDK:
    - 6522586: Enforce limits on Font creation.
    - 6536193: flaw in UTF8XmlOutput.
    - 6610888: Potential use of cleared of incorrect acc in JMX Monitor.
    - 6610896: JMX Monitor handles thread groups incorrectly.
    - 6630639: lightweight HttpServer leaks file descriptors on no-data
      connections.
    - 6632886: Font.createFont can be persuaded to leak temporary files.
    - 6636360: compiler/6595044/Main.java test fails with 64bit java on
      solaris-sparcv9 with SIGSEGV.
    - 6652463: MediaSize constructors allow to redefine the mapping of
      standard MediaSizeName values.
    - 6652929: Font.createFont(int,File) trusts File.getPath.
    - 6656633: getNotificationInfo methods static mutable (findbugs).
    - 6658158: Mutable statics in SAAJ (findbugs).
    - 6658163: txw2.DatatypeWriter.BUILDIN is a mutable static (findbugs).
    - 6691246: Thread context class loader can be set using JMX remote
      ClientNotifForwarded.
    - 6717680: LdapCtx does not close the connection if initialization fails.
    - 6721651: Security problem with out-of-the-box management.
    - 6737315: LDAP serialized data vulnerability.
    - 6792554: Java JAR Pack200 header checks are insufficent.
    - 6804996: JWS PNG Decoding Integer Overflow [V-flrhat2ln8].
    - 6804997: JWS GIF Decoding Heap Corruption [V-r687oxuocp].
    - 6804998: JRE GIF Decoding Heap Corruption [V-y6g5jlm8e1].
  * Add security patch for the lcms library.
  * Add accessibility patches java-access-bridge-security.patch and
    accessible-toolkit.patch.
  * Merge fixes for testsuite failures from the IcedTea6 branch.
  * Merge the proxy support for the plugin  from the IcedTea6 branch.
  * Merge http://icedtea.classpath.org/hg/release/icedtea6-1.4.1/rev/546ef0cdee06
    (TJ). LP: #344705.
  * Add a Xb-Npp-Description for the IcedTea plugin. LP: #272010.

  [Edward Nevill]
  * Put VFP back in - selects VFP / novfp autmatically
  * More assembler optimisations

 -- Matthias Klose <doko@xxxxxxxxxx>   Thu, 09 Apr 2009 14:14:12 +0200

** Changed in: openjdk-6 (Ubuntu)
       Status: Triaged => Fix Released

-- 
Some plugins lack proper ubufox integration (Was: confusing plugin selection dialog)
https://bugs.launchpad.net/bugs/272010
You received this bug notification because you are a member of OpenJDK,
which is subscribed to openjdk-6 in ubuntu.

Status in “icedtea-gcjwebplugin” source package in Ubuntu: Triaged
Status in “openjdk-6” source package in Ubuntu: Fix Released
Status in “sun-java5” source package in Ubuntu: Triaged
Status in “sun-java6” source package in Ubuntu: Triaged
Status in “totem” source package in Ubuntu: Fix Released
Status in “ubufox” source package in Ubuntu: Invalid

Bug description:
To provide proper integration with ubufox,

1. plugins that use update-alternatives mechanism should also put a link for their binary in

 /usr/share/ubufox/plugins/

and touch all /usr/lib/firefox-3.*/.autoreg that exist in .postinst.

2. All plugins should have a Description and Filename header added to the binary package control, like gnash:

Xb-Npp-Description: The GNU SWF Player (http://www.gnu.org/software/gnash/)
Xb-Npp-File: libgnashplugin.so

--------

When encountering a java plugin Firefox offers a confusing dialog:
it gives two options:
1. "GCJ Web Browser Plugin"
2. "The GCJ Web Browser Plugin"

the second options supposedly uses openjdk.

No descriptions are given whatsoever.