[SECURITY] IcedTea 2.6.25 for OpenJDK 7 Released!

[Andrew Hughes]

The IcedTea project provides a harness to build the source code from
OpenJDK using Free Software build tools, along with additional
features such as the ability to build against system libraries and
support for alternative virtual machines and architectures beyond
those supported by OpenJDK.

This release updates our OpenJDK 7 support in the 2.6.x series with
the January 2021 security fix from OpenJDK 7u291.

If you find an issue with the release, please report it to our bug
database (http://icedtea.classpath.org/bugzilla) under the appropriate
component. Development discussion takes place on the distro-pkg-dev at
openjdk.java.net mailing list and patches are always welcome.

Full details of the release can be found below.

What's New?
===========
New in release 2.6.25 (2021-02-12):

* Security fixes
  - JDK-8247619: Improve Direct Buffering of Characters
* Import of OpenJDK 7 u291 build 1
  - JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
  - JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  - JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d

The tarballs can be downloaded from:

* http://icedtea.classpath.org/download/source/icedtea-2.6.25.tar.gz
* http://icedtea.classpath.org/download/source/icedtea-2.6.25.tar.xz

We provide both gzip and xz tarballs, so that those who are able to
make use of the smaller tarball produced by xz may do so.

The tarballs are accompanied by digital signatures available at:

* http://icedtea.classpath.org/download/source/icedtea-2.6.25.tar.gz.sig
* http://icedtea.classpath.org/download/source/icedtea-2.6.25.tar.xz.sig

These are produced using my public key. See details below.

PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222

GnuPG >= 2.1 is required to be able to handle this key.

SHA256 checksums:

135f7616676fcace740cbe34cfbfc17e557b3fab696257c7bce26c3e53b4f751  icedtea-2.6.25.tar.gz
8ca2de5b1fbbcc1aa60a42e5d360d4c16d6a20a326c36d39448f006fe1c33aef  icedtea-2.6.25.tar.gz.sig
1b2b41fb76ce751ae07d33136324ad923625a6578bc5a8b65b3189b559a9f84f  icedtea-2.6.25.tar.xz
5b8169ab93d5705205b02939d365f2f0238b679e737d84669c41dc7cda01ca36  icedtea-2.6.25.tar.xz.sig

The checksums can be downloaded from:

* http://icedtea.classpath.org/download/source/icedtea-2.6.25.sha256

The following people helped with these releases:

* Andrew Hughes (all backports & bug fixes, release management)

We would also like to thank the bug reporters and testers!

To get started:

$ tar xzf icedtea-2.6.25.tar.gz

or:

$ tar x -I xz -f icedtea-2.6.25.tar.xz

then:

$ mkdir icedtea-build
$ cd icedtea-build
$ ../icedtea-2.6.25/configure
$ make

Full build requirements and instructions are available in the INSTALL file.

Happy hacking!
-- 
Andrew :)

Senior Free Java Software Engineer
OpenJDK Package Owner
Red Hat, Inc. (http://www.redhat.com)

PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
Fingerprint = 5132 579D D154 0ED2 3E04  C5A0 CFDA 0F9B 3596 4222
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <https://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20210213/5ac2d4ba/signature.asc>