openjdk team mailing list archive

[Kees Cook <kees@xxxxxxxxxx>]

A fix for this is being processed now and should be available shortly.
Sorry for the delay!

** Changed in: openjdk-6 (Ubuntu)
     Assignee: (unassigned) => Kees Cook (kees)

** Changed in: openjdk-6 (Ubuntu)
       Status: New => Fix Committed

** Changed in: openjdk-6 (Ubuntu)
   Importance: Undecided => High

** Visibility changed to: Public

** Also affects: openjdk-6 (Ubuntu Hardy)
   Importance: Undecided
       Status: New

** Changed in: openjdk-6 (Ubuntu Hardy)
       Status: New => Fix Committed

** Changed in: openjdk-6 (Ubuntu Hardy)
     Assignee: (unassigned) => Kees Cook (kees)

** Changed in: openjdk-6 (Ubuntu Hardy)
   Importance: Undecided => High

** Changed in: openjdk-6 (Ubuntu)
     Assignee: Kees Cook (kees) => (unassigned)

** Changed in: openjdk-6 (Ubuntu)
   Importance: High => Undecided

** Changed in: openjdk-6 (Ubuntu)
       Status: Fix Committed => Invalid

-- 
openjdk-6-jre-headless depends on ca-certificates-java which isn't in 8.04
https://bugs.launchpad.net/bugs/619158
You received this bug notification because you are a member of OpenJDK,
which is subscribed to openjdk-6 in ubuntu.

Status in “openjdk-6” package in Ubuntu: Invalid
Status in “openjdk-6” source package in Hardy: Fix Committed

Bug description:
openjdk-6-jre-headless 6b18-1.8.1-0ubuntu1~8.04.2 was made available to 8.04 this morning as a security update.  It depends on ca-certificates-java which doesn't exist.  Earlier versions, e.g. my current 6b11-2ubuntu2.2, depended on ca-certificates which was satisfied.  This means openjdk-6-jre, openjdk-6-jre-headless, and openjdk-6-jre-lib are all being kept back and can't be installed.  Since they are part of a security update I don't know if that makes this bug itself a security one, so erring on the side of caution.