Your message dated Sat, 23 Mar 2019 16:08:07 +0100
with message-id <[email protected]>
and subject line closing remaining openjdk-6 bugs
has caused the Debian Bug report #590632,
regarding openjdk: Allows all signed applets to access Debian account
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
590632: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590632
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: openjdk-6-jre
Version: 6b18-1.8-4
Severity: important
File: openjdk
Tags: upstream


First I believe it is relly wrong to grant any signed applet
AllPermission. It allows internet banks, tax authoritis, photo printing
operations, etc access to our computers.

Also I could not find a way to regain control over which applet get
control over my Debian accound.

using 
  permission java.lang.RuntimePermission "usePolicy";
in ~/.java.policy does not work.

Check this to test java applet permission (this for selfsigned applet on
site with self-signed SSL certificate)
https://www.agol.dk/elgaard/sand/sand.html


Just because I use a netbank or det danish digital signature does not
men that I want to allow them to read or write any file on my user account.



-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=da_DK.UTF-8, LC_CTYPE=da_DK.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages openjdk-6-jre depends on:
ii  libaccess-bridge-java-j 1.26.2-5         Java Access Bridge for GNOME (jni 
ii  libasound2              1.0.23-1         shared library for ALSA applicatio
ii  libc6                   2.11.2-2         Embedded GNU C Library: Shared lib
ii  libgif4                 4.1.6-9          library for GIF images (library)
ii  libjpeg62               6b1-1            The Independent JPEG Group's JPEG 
ii  libpng12-0              1.2.44-1         PNG library - runtime
ii  libpulse0               0.9.21-3         PulseAudio client libraries
ii  libx11-6                2:1.3.3-3        X11 client-side library
ii  libxext6                2:1.1.2-1        X11 miscellaneous extension librar
ii  libxi6                  2:1.3-4          X11 Input extension library
ii  libxrender1             1:0.9.6-1        X Rendering Extension client libra
ii  libxtst6                2:1.1.0-3        X11 Testing -- Record extension li
ii  openjdk-6-jre-headless  6b18-1.8-4       OpenJDK Java runtime, using Hotspo
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

openjdk-6-jre recommends no packages.

Versions of packages openjdk-6-jre suggests:
ii  icedtea6-plugin               6b18-1.8-4 web browser plugin based on OpenJD

-- no debconf information



--- End Message ---
--- Begin Message ---
Version: 6b41-1.13.13-1+rm

Hi,

openjdk-6 was last released with Debian 7.0 (wheezy), which had its LTS
support end nearly a year ago and which has now been archived.
I'm therefore closing the remaining openjdk-6 bugs, assuming they are no
longer relevant for newer (and still supported) openjdk releases.

Andreas

--- End Message ---

Reply via email to