Ubuntu: 1055-1: OpenJDK vulnerabilities


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) Ubuntu: 1055-1: OpenJDK vulnerabilities
# 1  
Old 02-02-2011
Ubuntu: 1055-1: OpenJDK vulnerabilities

LinuxSecurity.com: It was discovered that IcedTea for Java did not properly verifysignatures when handling multiply signed or partially signed JAR files,allowing an attacker to cause code to execute that appeared to comefrom a verified source. (CVE-2011-0025) [More...]

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
imqkeytool(1M)						  System Administration Commands					    imqkeytool(1M)

NAME
imqkeytool - generate a self-signed certificate for secure communication SYNOPSIS
/usr/bin/imqkeytool [-broker] [-servlet keystore_location] /usr/bin/imqkeytool -h DESCRIPTION
The imqkeytool utility generates a self-signed certificate for secure communication. The certificate can be used by a broker instance to establish a secure connection with a client, or by a Message Queue-supplied HTTPS servlet to establish a secure connection with a broker instance. An HTTPS servlet is an SSL-enabled varient of the HyperText Transfer Protocol that establishes a secure connection with a broker instance. Without an option, imqkeytool generates a self-signed certificate for a broker instance. imqkeytool uses command line options to specify whether the certificate is used by a broker instance or by a servlet. OPTIONS
The following options are supported: -broker Generate a self-signed certificate for the broker and places it in the Message Queue keystore. All broker instances running on a system must use the same certificate. -h Display usage help. Do not execute anything else on the command line. -servlet keystore_location Generate a self-signed certificate for an HTTPS servlet and places it in keystore_location. keystore_location refers to the location of the keystore. You should move this keystore to a location where it is accessible and readable by the Message Queue HTTPS servlet to establish a secure connection with a bro- ker. ENVIRONMENT VARIABLES
The following environment variables affect the execution of this command: IMQ_JAVAHOME Specify the Java 2 compatible runtime. When this environment variable is not set it defaults to /usr/j2se. EXIT STATUS
The following exit values are returned: 0 Successful completion. >0 An error occurred. FILES
/etc/imq/keystore Contains Message Queue keystore in which imqkeytool stores a self-signed certificate for brokers. ATTRIBUTES
See attributes(5) for descriptions of the following attributes: +-----------------------------+-----------------------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | +-----------------------------+-----------------------------+ |Availability |SUNWiqu | +-----------------------------+-----------------------------+ SEE ALSO
imqadmin(1M), imqbrokerd(1M), imqcmd(1M), imqdbmgr(1M), imqobjmgr(1M), imqusermgr(1M), attributes(5) Sun Java System Message Queue Administrator's Guide SunOS 5.11 11 Mar 2004 imqkeytool(1M)