OpenJDK 6 build 14 source posted

[Joe Darcy]

The source bundle for OpenJDK 6 build 14 is available for download from:

   http://download.java.net/openjdk/jdk6/

Fixes of note include: 

* All relevant security fixes in the current round of security updates:
  http://blogs.sun.com/security/category/news [1]

* Upgrading the HotSpot in OpenJDK 6 from HotSpot 10 to HotSpot 11 [2]

* Correcting legal notices [3]

* Fixing build documentation and other miscellaneous fixes [4]

This will be the last teamware based source drop; all future source drops will be based on the forthcoming public OpenJDK 6 Mercurial repositories.

-Joe


[1] Security fixes

6592792 Add com.sun.xml.internal to the "package.access" property in $JAVA_HOME/lib/security/java.security
6484091 FileSystemView leaks directory info
6766136 corrupted gif image may cause crash in java splashscreen library.
6755943 Java JAR Pack200 Decompression should enforce stricter header checks
6751322 Vulnerability report: Sun Java JRE TrueType Font Parsing Heap Overflow
4486841 UTF8 decoder should adhere to corrigendum to Unicode 3.0.1
6721753 File.createTempFile produces guessable file names
6734167 Calendar.readObject allows elevation of privileges
6733336 Crash on malformed font
6726779 ConvolveOp on USHORT raster can cause the JVM crash.
6588160 jaas krb5 client leaks OS-level UDP sockets (all platforms) 
6733959 Insufficient checks for "Main-Class" manifest entry in JAR files
6497740 Limit the size of RSA public keys


[2] HotSpot upgrade

6775772 Update OpenJDK 6 to HS11 from HS10


[3] Legal notices
6772068 Fix copyright in test/tools/javac/Paths/6638501
6773363 Fix bad copyrights in src/share/classes/java/awt/dnd and test/javax/script/Test3.java
6706382 jdk/test/java/util/Locale/data/deflocale.sol10 has incorrect legal notice


[4] Miscellaneous

6775844 Fix broken openjdk_build problem when building OPENJDK=true
6775851 Fix README-builds.html to document the use of Solaris 8
6683213 CounterMonitor's derived Gauge badly initialized
6774170 LocalRMIServerSocketFactory should protect against ServerSocket.accept().getInetAddress() being null
6741058 Move org/relaxng/datatype sources from jdk to jaxws workspace
6728126 Parsing Extensions in Client Hello message is done in a wrong way
6745052 SSLServerSocket file descriptor leak


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.openjdk.java.net/pipermail/jdk6-dev/attachments/20081203/546725a6/attachment.html