openjdk team mailing list archive

[Launchpad Bug Tracker <1766843@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package openjdk-lts - 10.0.1+10-4ubuntu1

---------------
openjdk-lts (10.0.1+10-4ubuntu1) cosmic; urgency=medium

  * Sync packages with 10.0.1+10-3:
    - OpenJDK 10.0.1+10 addresses the following security issues:
      - CVE-2018-2790,S8189969: Manifest better manifest entries.
      - CVE-2018-2795,S8189977: Improve permission portability.
      - CVE-2018-2796,S8189981: Improve queuing portability.
      - CVE-2018-2797,S8189985: Improve tabular data portability.
      - CVE-2018-2798,S8189989: Improve container portability.
      - CVE-2018-2799,S8189993: Improve document portability.
      - CVE-2018-2794,S8189997: Enhance keystore mechanisms.
      - CVE-2018-2814,S8192025: Less referential references.
      - CVE-2018-2815,S8192757: Improve stub classes implementation.
      - CVE-2018-2800,S8193833: Better RMI connection support.
    - Stop installing the policytool desktop file. LP: #1766843,
    - Prefer to build with OpenJDK 10 instead of OpenJDK 9.
    - Fix ftbfs on powerpcspe, adjusting the MIN_FLOAT constant (Adrian
      Glaubitz). Closes: #897334.
    - Remove classes.jsa files on package removal. Closes: #897411.

 -- Matthias Klose <doko@xxxxxxxxxx>  Sun, 06 May 2018 08:54:49 +0200

** Changed in: openjdk-lts (Ubuntu)
       Status: Confirmed => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-2790

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-2794

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-2795

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-2796

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-2797

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-2798

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-2799

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-2800

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-2814

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-2815

-- 
You received this bug notification because you are a member of OpenJDK,
which is subscribed to openjdk-lts in Ubuntu.
https://bugs.launchpad.net/bugs/1766843

Title:
  obsolete openjdk-11-policytool.desktop file is still installed - gives
  error when users try to launch from menu

Status in openjdk-lts package in Ubuntu:
  Fix Released

Bug description:
  I believe the policytool was deprecated, so there is no longer an
  alternative linked to /usr/bin/policytool for the .desktop file to
  use.

  However, the desktop file is still installed to

  /usr/share/applications/openjdk-11-policytool.desktop

  This result in a invalid desktop entry in at least KDE Plasma's main
  desktop menus, which produces the error that /usr/bin/policytool
  cannot be found if a user tries to launch it.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openjdk-lts/+bug/1766843/+subscriptions