[SECURITY] IcedTea 2.3.1 Released!

[Andrew Hughes]

----- Original Message -----
> 
> 
> ----- Original Message -----
> > On 30.08.2012 14:44, Andrew Hughes wrote:
> > > 
> > > 
> > > ----- Original Message -----
> > >> On 30.08.2012 02:51, Andïï wrote:
> > >>> We are pleased to announce the release of IcedTea 2.3.1 [*],
> > >>> based
> > >>> on
> > >>> OpenJDK7 u6.
> > >>
> > >> apparently the release tarball is unusable for any zero build.
> > >> While
> > >> the
> > >> ChangeLog claims that the patches are included, they are not. At
> > >> least this
> > >> change is missing from the release tarball:
> > >>
> > >> 2012-08-29  Andrew John Hughes  <gnu_andrew at member.fsf.org>
> > >>
> > >>         * Makefile.am:
> > >>         (EXTRA_DIST): Add HotSpot-specific patches.
> > >>
> > >> I didn't check for any other things missing in the release
> > >> tarball.
> > >>
> > >>   Matthias
> > >>
> > >>
> > >>
> > > 
> > > No it's not.
> > 
> > You are wrong.
> 
> No I'm right.  That change is there.  It adds patches/boot/hotspot/.
> You're right in that it doesn't add patches/hotspot but that's not
> what that change did.  Claiming that change isn't there is a
> misnomer.
> 
> > 
> > > $ tar xzf /var/lib/public-download/source/icedtea-2.3.1.tar.gz
> > > $ ls patches/boot/hotspot/
> > > default  zero
> > > 
> > > $ cat ChangeLog |grep EXTRA_DIST
> > > 	(EXTRA_DIST): Add HotSpot-specific patches.
> > 
> > not patches/boot/hotspot is missing, but patches/hotspot, which are
> > referenced
> > when ALT_HSBUILD is set:
> > 
> > # Conditional patches
> > 
> > if WITH_ALT_HSBUILD
> > ICEDTEA_PATCHES += \
> >         patches/hotspot/$(HSBUILD)/7089790-bsd_port.patch \
> >         patches/hotspot/$(HSBUILD)/7098194-macosx_port.patch \
> >         patches/hotspot/$(HSBUILD)/7116189-setnativethreadname.patch
> >         \
> >         patches/hotspot/$(HSBUILD)/6924259-string_offset.patch \
> >         patches/hotspot/$(HSBUILD)/revert_arm_debug.patch
> > endif
> > 
> 
> The problem is that these patches are only checked if that option is
> on
> so they weren't caught by either the make distcheck or normal build
> with
> that tarball.
> 
> I'll put out a 2.3.2 release for Zero later, and check CACAO/JamVM
> while
> I'm at it.
> 
> Too many options...
> 
> > 
> > 
> 
> --
> Andrew :)
> 
> Free Java Software Engineer
> Red Hat, Inc. (http://www.redhat.com)
> 
> PGP Key: 248BDC07 (https://keys.indymedia.org/)
> Fingerprint = EC5A 1F5E C0AD 1D15 8F1F  8F91 3B96 A578 248B DC07
> 
> 

As requested on IRC, I've uploaded the pre-release tarball:

http://icedtea.classpath.org/download/source/icedtea-2.3.2pre.tar.gz
http://icedtea.classpath.org/download/source/icedtea-2.3.2pre.tar.gz.sig

9a0dd8cb5b4dc94f90b13411429ec1fefddd07b937c8ae5086edb978cd316cad  icedtea-2.3.2pre.tar.gz

It does have those patches... ;-)

Diff between 2.3.1 & 2.3.2pre:

@@ -2120,6 +2120,14 @@
 /patches/rhino.patch
 /patches/jamvm/
 /patches/jamvm/remove-sun.misc.Perf-debug-code.patch
+/patches/hotspot/
+/patches/hotspot/zero/
+/patches/hotspot/zero/7116189-setnativethreadname.patch
+/patches/hotspot/zero/6924259-string_offset.patch
+/patches/hotspot/zero/7098194-macosx_port.patch
+/patches/hotspot/zero/7175133-string_offset.patch
+/patches/hotspot/zero/7089790-bsd_port.patch
+/patches/hotspot/zero/revert_arm_debug.patch
 /patches/nss-config.patch
 /patches/boot/
 /patches/boot/jaxws-jdk-dependency.patch

Please test and let me know of any issues ASAP.
-- 
Andrew :)

Free Java Software Engineer
Red Hat, Inc. (http://www.redhat.com)

PGP Key: 248BDC07 (https://keys.indymedia.org/)
Fingerprint = EC5A 1F5E C0AD 1D15 8F1F  8F91 3B96 A578 248B DC07