-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[slackware-security]  java (jre, j2sdk) (SSA:2005-170-01)

Sun has released a couple of security advisories pertaining to both the
Java Runtime Environment and the Standard Edition Development Kit.
These could allow applets to read or write to local files.  For more
details, Sun's advisories may be found here:

  http://sunsolve.sun.com/search/document.do?assetkey=1-26-101748-1
  http://sunsolve.sun.com/search/document.do?assetkey=1-26-101749-1

Slackware repackage's Sun's Java(TM) binaries without changing them, so
the packages from Slackware -current should be used for all glibc based
Slackware versions.


Here are the details from the Slackware -current ChangeLog:
+--------------------------+
Sun Jun 19 21:45:07 PDT 2005
l/jre-1_5_0_03-i586-1.tgz:  This already-issued package fixes some
  recently announced security issues that could allow applets to read
  or write to local files.  See:
    http://sunsolve.sun.com/search/document.do?assetkey=1-26-101748-1
    http://sunsolve.sun.com/search/document.do?assetkey=1-26-101749-1
  (* Security fix *)
extra/j2sdk-1.5.0_03/j2sdk-1_5_0_03-i586-1.tgz:  Fixed the slack-desc
  to not include the release version to prevent future mishaps. :-)
  This already-issued package fixes some recently announced security
  issues that could allow applets to read or write to local files.
  See:
    http://sunsolve.sun.com/search/document.do?assetkey=1-26-101748-1
    http://sunsolve.sun.com/search/document.do?assetkey=1-26-101749-1
  (* Security fix *)
+--------------------------+


Where to find the new packages:
+-----------------------------+

Updated packages for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, and -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/jre-1_5_0_03-i586-1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-current/extra/j2sdk-1.5.0_03/j2sdk-1_5_0_03-i586-1.tgz


MD5 signatures:
+-------------+

5835b357ea9cb0d3587a163a98bcaeb3  jre-1_5_0_03-i586-1.tgz
9248ab96512ac91b589d338aa4af535c  j2sdk-1_5_0_03-i586-1.tgz


Installation instructions:
+------------------------+

Upgrade the package as root:
# upgradepkg jre-1_5_0_03-i586-1.tgz


+-----+

Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com

+------------------------------------------------------------------------+
| To leave the slackware-security mailing list:                          |
+------------------------------------------------------------------------+
| Send an email to majordomo@slackware.com with this text in the body of |
| the email message:                                                     |
|                                                                        |
|   unsubscribe slackware-security                                       |
|                                                                        |
| You will get a confirmation message back containing instructions to    |
| complete the process.  Please do not reply to this email address.      |
+------------------------------------------------------------------------+

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.7 (GNU/Linux)

iD8DBQFCtkqZakRjwEAQIjMRAn8FAKCIqTzO3dRTS5rxkEOveh6wegn/uQCaA1+X
9i3V7Q7Gs9rYinGEGOTAMj0=
=pd/f
-----END PGP SIGNATURE-----