openjdk team mailing list archive

[Launchpad Bug Tracker <2016396@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package openjdk-8 -
8u372-ga~us1-0ubuntu1~23.04

---------------
openjdk-8 (8u372-ga~us1-0ubuntu1~23.04) lunar-security; urgency=medium

  * Upload to Ubuntu 23.04.

openjdk-8 (8u372-ga~us1-0ubuntu1) mantic; urgency=medium

  * OpenJDK 8u372 release, build 7.
    - CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939,
      CVE-2023-21954, CVE-2023-21967, CVE-2023-21968.
    - Release notes:
      https://mail.openjdk.org/pipermail/jdk8u-dev/2023-April/017039.html
  * d/rules: remove IcedTeaPlugin.so reference (LP: #2016396).

 -- Vladimir Petko <vladimir.petko@xxxxxxxxxxxxx>  Sat, 06 May 2023
12:55:35 +0200

** Changed in: openjdk-8 (Ubuntu)
       Status: New => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-21930

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-21937

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-21938

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-21939

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-21954

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-21967

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-21968

** Changed in: openjdk-8 (Ubuntu)
       Status: New => Fix Released

-- 
You received this bug notification because you are a member of OpenJDK,
which is subscribed to openjdk-8 in Ubuntu.
https://bugs.launchpad.net/bugs/2016396

Title:
  IcedTeaPlugin.so reference should be removed from .java-1.8.0-openjdk-
  amd64.jinfo

Status in openjdk-8 package in Ubuntu:
  Fix Released

Bug description:
  IcedTeaPlugin.so has been removed from icedtea-8-plugin because the
  NPAPI support in browsers has been removed.  Therefore, the
  openjdk-8-jre-headless package should remove the reference to
  IcedTeaPlugin.so in .java-1.8.0-openjdk-amd64.jinfo because it causes
  an error to be thrown when switching between java versions when using
  update-java-alternatives.  This affects all versions of ubuntu using
  the openjdk-8-jre-headless package.

  Example:
  update-alternatives: error: no alternatives for mozilla-javaplugin.so
  update-java-alternatives: plugin alternative does not exist: /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/IcedTeaPlugin.so

  Fix:
  --- a/usr/lib/jvm/.java-1.8.0-openjdk-amd64.jinfo	2023-01-24 20:02:58.000000000 +0100
  +++ b/usr/lib/jvm/.java-1.8.0-openjdk-amd64.jinfo	2023-04-16 00:04:20.547250688 +0200
  @@ -47,4 +47,3 @@
   jdkhl jcmd /usr/lib/jvm/java-8-openjdk-amd64/bin/jcmd
   jdk appletviewer /usr/lib/jvm/java-8-openjdk-amd64/bin/appletviewer
   jdk jconsole /usr/lib/jvm/java-8-openjdk-amd64/bin/jconsole
  -plugin mozilla-javaplugin.so /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/amd64/IcedTeaPlugin.so

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openjdk-8/+bug/2016396/+subscriptions