/hg/icedtea6: Add 1.12.8 & 1.13.1 release notes.
andrew at icedtea.classpath.org
andrew at icedtea.classpath.org
Wed Jan 22 17:22:32 PST 2014
changeset 3d420569bf1d in /hg/icedtea6
details: http://icedtea.classpath.org/hg/icedtea6?cmd=changeset;node=3d420569bf1d
author: Andrew John Hughes <gnu.andrew at redhat.com>
date: Thu Jan 23 01:21:49 2014 +0000
Add 1.12.8 & 1.13.1 release notes.
2014-01-23 Andrew John Hughes <gnu.andrew at redhat.com>
* NEWS: Add 1.12.8 & 1.13.1 release notes.
diffstat:
ChangeLog | 4 ++++
NEWS | 54 ++++++++++++++++++++++++++++++++++++++++++++++++++++--
2 files changed, 56 insertions(+), 2 deletions(-)
diffs (84 lines):
diff -r df7f5fed4615 -r 3d420569bf1d ChangeLog
--- a/ChangeLog Wed Jan 22 09:53:21 2014 +0000
+++ b/ChangeLog Thu Jan 23 01:21:49 2014 +0000
@@ -1,3 +1,7 @@
+2014-01-23 Andrew John Hughes <gnu.andrew at redhat.com>
+
+ * NEWS: Add 1.12.8 & 1.13.1 release notes.
+
2014-01-22 Andrew John Hughes <gnu.andrew at redhat.com>
* Makefile.am:
diff -r df7f5fed4615 -r 3d420569bf1d NEWS
--- a/NEWS Wed Jan 22 09:53:21 2014 +0000
+++ b/NEWS Thu Jan 23 01:21:49 2014 +0000
@@ -14,6 +14,51 @@
New in release 1.14.0 (201X-XX-XX):
+New in release 1.13.1 (2014-01-22):
+
+* Security fixes
+ - S6727821: Enhance JAAS Configuration
+ - S7068126, CVE-2014-0373: Enhance SNMP statuses
+ - S8010935: Better XML handling
+ - S8011786, CVE-2014-0368: Better applet networking
+ - S8021257, CVE-2013-5896: com.sun.corba.se.** should be on restricted package list
+ - S8021271, CVE-2014-0408: Better buffering in ObjC code
+ - S8022904: Enhance JDBC Parsers
+ - S8022927: Input validation for byte/endian conversions
+ - S8022935: Enhance Apache resolver classes
+ - S8022945: Enhance JNDI implementation classes
+ - S8023057: Enhance start up image display
+ - S8023069, CVE-2014-0411: Enhance TLS connections
+ - S8023245, CVE-2014-0423: Enhance Beans decoding
+ - S8023301: Enhance generic classes
+ - S8023672: Enhance jar file validation
+ - S8024306, CVE-2014-0416: Enhance Subject consistency
+ - S8024530: Enhance font process resilience
+ - S8024867: Enhance logging start up
+ - S8025014: Enhance Security Policy
+ - S8025018, CVE-2014-0376: Enhance JAX-P set up
+ - S8025026, CVE-2013-5878: Enhance canonicalization
+ - S8025034, CVE-2013-5907: Improve layout lookups
+ - S8025448: Enhance listening events
+ - S8025758, CVE-2014-0422: Enhance Naming management
+ - S8025767, CVE-2014-0428: Enhance IIOP Streams
+ - S8026172: Enhance UI Management
+ - S8026176: Enhance document printing
+ - S8026193, CVE-2013-5884: Enhance CORBA stub factories
+ - S8026204: Enhance auth login contexts
+ - S8026417, CVE-2013-5910: Enhance XML canonicalization
+ - S8027201, CVE-2014-0376: Enhance JAX-P set up
+* Import of OpenJDK6 b30
+ - OJ24: Fix change summary generator
+ - OJ25: Remove @Override annotation added on interfaces by 2014/01/14 security fixes
+ - S6995424: Eliminate dependency to a deprecated API com.sun.security.auth.PolicyFile
+ - S8026826: JDK 7 fix for 8010935 broke the build
+ - S8027837: JDK-8021257 causes CORBA build failure on emdedded platforms
+* Bug fixes
+ - Fix path in nss-not-enabled-config.patch.
+
+New in release 1.12.8 (2014-01-22):
+
* Security fixes
- S6727821: Enhance JAAS Configuration
- S7068126, CVE-2014-0373: Enhance SNMP statuses
@@ -45,10 +90,15 @@
- S8026204: Enhance auth login contexts
- S8026417, CVE-2013-5910: Enhance XML canonicalization
- S8027201, CVE-2014-0376: Enhance JAX-P set up
-* Import of OpenJDK6 b30
- - OJ24: Fix change summary generator
+* Backports
- S6995424: Eliminate dependency to a deprecated API com.sun.security.auth.PolicyFile
- S8026826: JDK 7 fix for 8010935 broke the build
+ - S8027837: JDK-8021257 causes CORBA build failure on emdedded platforms
+* Bug fixes
+ - Fail if a C and C++ compiler are not detected.
+ - Fix path in nss-not-enabled-config.patch.
+* SystemTap support:
+ - Ensure all patches are applied.
New in release 1.13.0 (2013-12-26):
More information about the distro-pkg-dev
mailing list