Hello, I have just installed openjdk-6-jre-lib 6b33-1.13.5-2~deb6u1 on a production system. I keep track of /etc in a repository and noticed the following changes:
diff --git a/java-6-openjdk/fontconfig.properties b/java-6-openjdk/fontconfig.properties index fbc37d2..faf2b33 100644 --- a/java-6-openjdk/fontconfig.properties +++ b/java-6-openjdk/fontconfig.properties @@ -25,7 +25,7 @@ # Version -# Uses Ubuntu 8.04 (hardy), Debian 6.0 (Squeeze) (and more recent releases) fonts and file paths. +# Uses Ubuntu 14.04 (trusty), Debian 8.0 (jessie) (and more recent releases) fonts and file paths. version=1 # Component Font Mappings @@ -276,20 +276,20 @@ exclusion.japanese-vlgothic=0390-03d6,2200-22ef,2701-27be # Font File Names -filename.DejaVu_Sans=/usr/share/fonts/truetype/ttf-dejavu/DejaVuSans.ttf -filename.DejaVu_Sans_Bold=/usr/share/fonts/truetype/ttf-dejavu/DejaVuSans-Bold.ttf -filename.DejaVu_Sans_Oblique=/usr/share/fonts/truetype/ttf-dejavu/DejaVuSans-Oblique.ttf -filename.DejaVu_Sans_Bold_Oblique=/usr/share/fonts/truetype/ttf-dejavu/DejaVuSans-BoldOblique.ttf +filename.DejaVu_Sans=/usr/share/fonts/truetype/dejavu/DejaVuSans.ttf +filename.DejaVu_Sans_Bold=/usr/share/fonts/truetype/dejavu/DejaVuSans-Bold.ttf +filename.DejaVu_Sans_Oblique=/usr/share/fonts/truetype/dejavu/DejaVuSans-Oblique.ttf +filename.DejaVu_Sans_Bold_Oblique=/usr/share/fonts/truetype/dejavu/DejaVuSans-BoldOblique.ttf Yet those font files actually did not change location in squeeze-lts. I have not done any further review. Cheers, David Am Mittwoch, den 26.11.2014, 08:44 +0100 schrieb Raphael Hertzog: > Hello, > > I have a prepared a new upstream version of openjdk-6 for squeeze, > it fixes many CVE but there's always some risks of regressions and > as such I would like confirmation from some heavy java users that > this update is fine. > > Please download the test packages and install theme (amd64 only, > if you need i386, please ask): > $ dget > https://people.debian.org/~hertzog/packages/openjdk-6_6b33-1.13.5-2~deb6u1_amd64.changes > $ sudo debi --upgrade openjdk-6_6b33-1.13.5-2~deb6u1_amd64.changes > > openjdk-6 (6b33-1.13.5-2~deb6u1) squeeze-lts; urgency=medium > . > * Backport new upstream release to Squeeze in order to fix many security > issues: CVE-2014-2490, CVE-2014-4209, CVE-2014-4216, CVE-2014-4218, > CVE-2014-4219, CVE-2014-4244, CVE-2014-4252, CVE-2014-4262, > CVE-2014-4263, > CVE-2014-4266, CVE-2014-4268, CVE-2014-6457, CVE-2014-6502, > CVE-2014-6504, > CVE-2014-6506, CVE-2014-6511, CVE-2014-6512, CVE-2014-6517, > CVE-2014-6519, > CVE-2014-6531, CVE-2014-6558 > > Thank you in advance for your help testing the packages ! > -- > Raphaël Hertzog ◈ Debian Developer > > Support Debian LTS: http://www.freexian.com/services/debian-lts.html > Learn to master Debian: http://debian-handbook.info/get/ > > -- David Ayers IntarS Austria - http://www.intars.at/ - ay...@intars.at Tel: +43 / 1 / 890 1263 Perfektastrasse 25/6/28 Fax: +43 / 1 / 890 1263-15 A-1230 Vienna Mob: +43 / 664 / 171 4511 Austria
signature.asc
Description: This is a digitally signed message part