Thanks for reporting this. It looks like a false positive. None of the files are detected as being a virus once the archive is extracted, and online scanner don't detect the file as a virus.
I've updated the list of known false positives here: http://bazaar.launchpad.net/~ubuntu-security/ubuntu-cve- tracker/master/view/head:/README.virus Thanks! ** Changed in: openjdk-6 (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1224723 Title: Clamscan finds CVE-2013-2465 in openjdk-6-jre-headless To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openjdk-6/+bug/1224723/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs