/hg/release/icedtea7-2.3: 2 new changesets

[andrew at icedtea.classpath.org]

changeset 4aeec93c841f in /hg/release/icedtea7-2.3
details: http://icedtea.classpath.org/hg/release/icedtea7-2.3?cmd=changeset;node=4aeec93c841f
author: Andrew John Hughes <gnu_andrew at member.fsf.org>
date: Fri Aug 31 13:12:41 2012 +0100

	Bring in non-security fixes.

	2012-08-31  Andrew John Hughes  <gnu_andrew at member.fsf.org>

		(JDK_CHANGESET): Update to IcedTea7 2.3 forest head
		and revised icedtea-2.3.2 tag.
		(JDK_SHA256SUM): Likewise.


changeset f8630130b123 in /hg/release/icedtea7-2.3
details: http://icedtea.classpath.org/hg/release/icedtea7-2.3?cmd=changeset;node=f8630130b123
author: Andrew John Hughes <gnu_andrew at member.fsf.org>
date: Fri Aug 31 13:17:58 2012 +0100

	List 2.3.2 forest changes in NEWS.

	2012-08-31  Andrew John Hughes  <gnu_andrew at member.fsf.org>

		* NEWS: Add 2.3.2 changes from the forest.
		Add Sun bug ID to previous security fix in
		2.3.1.


diffstat:

 ChangeLog   |  12 ++++++++++++
 Makefile.am |   4 ++--
 NEWS        |  13 ++++++++++++-
 3 files changed, 26 insertions(+), 3 deletions(-)

diffs (65 lines):

diff -r ba33aa1158dc -r f8630130b123 ChangeLog
--- a/ChangeLog	Fri Aug 31 11:32:34 2012 +0100
+++ b/ChangeLog	Fri Aug 31 13:17:58 2012 +0100
@@ -1,3 +1,15 @@
+2012-08-31  Andrew John Hughes  <gnu_andrew at member.fsf.org>
+
+	* NEWS: Add 2.3.2 changes from the forest.
+	Add Sun bug ID to previous security fix in
+	2.3.1.
+
+2012-08-31  Andrew John Hughes  <gnu_andrew at member.fsf.org>
+
+	(JDK_CHANGESET): Update to IcedTea7 2.3 forest head
+	and revised icedtea-2.3.2 tag.
+	(JDK_SHA256SUM): Likewise.
+
 2012-08-30  Andrew John Hughes  <gnu_andrew at member.fsf.org>
 
 	(CORBA_CHANGESET): Update to IcedTea7 2.3 forest head;
diff -r ba33aa1158dc -r f8630130b123 Makefile.am
--- a/Makefile.am	Fri Aug 31 11:32:34 2012 +0100
+++ b/Makefile.am	Fri Aug 31 13:17:58 2012 +0100
@@ -7,14 +7,14 @@
 CORBA_CHANGESET = 7fae6a3a68c7
 JAXP_CHANGESET = ee4bd94136ec
 JAXWS_CHANGESET = c89c6ac953e7
-JDK_CHANGESET = 8f41ab16e3ed
+JDK_CHANGESET = f78eb7e08ee1
 LANGTOOLS_CHANGESET = 867d5041bee6
 OPENJDK_CHANGESET = acba2d30209d
 
 CORBA_SHA256SUM = 8d94e9b594e4ae0eff6899cb4ff899ce66db3b4d6ef158e019b7be96e193ec0f
 JAXP_SHA256SUM = 26991edc468b7599a332753a60ff861fde78af439d0a5b87d0e5b389d5e53fb5
 JAXWS_SHA256SUM = a411bdde270bb0451b74fc9ba890159ed1f7070bc25f21b3ebd17b79b42805f8
-JDK_SHA256SUM = 05501767a2fe9b34394441ae4604759cde77cee1748ab19ff12134244a37675b
+JDK_SHA256SUM = 74cd8b7c7ed1d80dd4cfa45565584ec1c24cfd5e10a32fc026b92f0ce27ff224
 LANGTOOLS_SHA256SUM = ded69ccf2baea82b7baf9050c64160733ff45c10c0a363de80d795618c494707
 OPENJDK_SHA256SUM = ae63f88590d4aa82de82322e6bb61b31157e49617a4f8c310fc4c4ab4690f528
 
diff -r ba33aa1158dc -r f8630130b123 NEWS
--- a/NEWS	Fri Aug 31 11:32:34 2012 +0100
+++ b/NEWS	Fri Aug 31 13:17:58 2012 +0100
@@ -12,10 +12,21 @@
 
 New in release 2.3.2 (2012-10-16):
 
+* Security fixes
+  - S7162476, CVE-2012-1682: XMLDecoder security issue via ClassFinder
+  - S7194567, CVE-2012-3136: Improve long term persistence of java.beans objects
+  - S7163201, CVE-2012-0547: Simplify toolkit internals references
+* OpenJDK
+  - Fix Zero FTBFS issues with 2.3
+  - S7180036: Build failure in Mac platform caused by fix # 7163201
+  - S7182135: Impossible to use some editors directly
+  - S7183701: [TEST] closed/java/beans/security/TestClassFinder.java - compilation failed
+  - S7185678: java/awt/Menu/NullMenuLabelTest/NullMenuLabelTest.java failed with NPE
+
 New in release 2.3.1 (2012-08-29):
 
 * Security fixes
-  - RH852051, CVE-2012-4681: Reintroduce PackageAccessible checks removed in 6788531.
+  - RH852051, CVE-2012-4681, S7162473: Reintroduce PackageAccessible checks removed in 6788531.
 * Bug fixes
   - PR902: PulseAudioClip getMicrosecondsLength() returns length in milliseconds, not microseconds
   - PR986: IcedTea7 fails to build with IcedTea6 CACAO due to low max heap size