RHBA-2013:0099 - Bug Fix Advisory

Topic

Updated java-1.6.0-openjdk packages that fix various bugs are now available for
Red Hat Enterprise Linux 5.

Description

The java-1.6.0-openjdk packages provide the OpenJDK 6 Java Runtime Environment
and the OpenJDK 6 Java Software Development Kit.

This update fixes the following bugs:

• Previously, the CCacheInputStream class could not to read Kerberos ticket

cache files as it failed to handle the configuration settings stored in the
ticket cache file under a special principal name. The configuration credentials
are now ignored and the ticket cache is parsed correctly. Also, the initial
context token generated by the GSSAPI/SPNEGO plug-in was previously rejected by
the MIT Kerberos library due to incorrect data type of the reqFlags and
NegTokenInit fields. The fields now use the correct data types. (BZ#729502)

• A JStack exception was thrown when a program was trying to capture both java

and native stacktrace (mixed mode). Safety checks have been added and the
problem no longer occurs. (BZ#808293)

All users of java-1.6.0-openjdk are advised to upgrade to these updated
packages, which fix these bugs.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 729502 - Kerberos auth failing to work in openjdk due to two upstream bugs

CVEs

(none)

References

(none)