openjdk team mailing list archive

[Launchpad Bug Tracker <409736@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package openjdk-6 - 6b16-1.6~pre2-0ubuntu1

---------------
openjdk-6 (6b16-1.6~pre2-0ubuntu1) karmic; urgency=low

  * Update IcedTea from the 1.6 release branch:
    - Fix buffer overflow in debugger's socket handler (Kees Cook).
      https://bugs.openjdk.java.net/show_bug.cgi?id=100103. LP: #409736.
    - plugin fixes.
  * Move the pulseaudio recommendation to a suggestion, don't build-depend
    on pulseaudio.
  * Build for armv6 (on armel).

  [ Kees Cook ]
  * debian/rules: Re-enable fortification and stack protector
    (LP: #330713).
  * Adding stack markings to the x86 assembly for not using executable
    stack. LP: #419018.

 -- Matthias Klose <doko@xxxxxxxxxx>   Fri, 28 Aug 2009 18:51:34 +0200

** Changed in: openjdk-6 (Ubuntu)
       Status: Triaged => Fix Released

** Bug watch added: bugs.openjdk.java.net/ #100103
   https://bugs.openjdk.java.net/show_bug.cgi?id=100103

-- 
needlessly executable stack markings
https://bugs.launchpad.net/bugs/409736
You received this bug notification because you are a member of OpenJDK,
which is subscribed to openjdk-6 in ubuntu.

Status in “openjdk-6” package in Ubuntu: Fix Released

Bug description:
Java is marked to have an executable stack[1].  This is potentially dangerous, and is simply an oversight from one of the compiled assembly files.  Adding stack markings to the assembly solves the issue.

[1] https://wiki.ubuntu.com/SecurityTeam/Roadmap/ExecutableStacks