/hg/release/icedtea-web-1.5: NEWS: mentioned fixes for RH1233697...

[jvanek at icedtea.classpath.org]

changeset 96da3c04a80c in /hg/release/icedtea-web-1.5
details: http://icedtea.classpath.org/hg/release/icedtea-web-1.5?cmd=changeset;node=96da3c04a80c
author: Jiri Vanek <jvanek at redhat.com>
date: Tue Sep 08 17:24:26 2015 +0200

	NEWS: mentioned fixes for RH1233697, RH1233667 and reuse of MissingALACAdialog for unsigned applications


diffstat:

 ChangeLog |  5 +++++
 NEWS      |  3 +++
 2 files changed, 8 insertions(+), 0 deletions(-)

diffs (25 lines):

diff -r 14c84c250e84 -r 96da3c04a80c ChangeLog
--- a/ChangeLog	Tue Sep 08 17:11:35 2015 +0200
+++ b/ChangeLog	Tue Sep 08 17:24:26 2015 +0200
@@ -1,3 +1,8 @@
+2015-09-03  Jiri Vanek  <jvanek at redhat.com>
+
+	* NEWS: mentioned fixes for RH1233697, RH1233667 and reuse of MissingALACAdialog
+	for unsigned applications
+
 2015-09-03  Jiri Vanek  <jvanek at redhat.com>
 
 	Fixed ArrayIndexOutOfBound in version cornercase issue
diff -r 14c84c250e84 -r 96da3c04a80c NEWS
--- a/NEWS	Tue Sep 08 17:11:35 2015 +0200
+++ b/NEWS	Tue Sep 08 17:24:26 2015 +0200
@@ -12,6 +12,9 @@
 * permissions sandbox and signed app and unsigned app with permissions all-permissions now run in sandbox instead of not at all.
 * fixed DownloadService
 * RH1231441 Unable to read the text of the buttons of the security dialogue
+* Fixed RH1233697 icedtea-web: applet origin spoofing
+* Fixed RH1233667 icedtea-web: unexpected permanent authorization of unsigned applets
+* MissingALACAdialog made available also for unsigned applications (but ignoring actual manifest value) and fixed
 
 New in release 1.5.2 (2014-11-26):
 * NetX