Webrevs for 2014/04/15 Security Fixes
Andrew Hughes
gnu.andrew at redhat.com
Tue Apr 15 22:16:54 UTC 2014
http://cr.openjdk.java.net/~andrew/openjdk6/20140415/
Changes:
- S4685768: A11y issue - Focus set to disabled component, can't Tab/Shift-Tab
- S4993545: NativeInLightFixer adds asynchronousity
- S6444769: java/awt/Insets/WindowWithWarningTest/WindowWithWarningTest.html fails
- S6607170: Focus not set by requestFocus
- S6607660: java.awt.Container.getMouseEventTargetImpl should be invoked while holding the TreeLock
- S6616323: consider benefits of replacing a component array with other collection from the awt.Container class
- S6633275: Need to support shaped/translucent windows
- S6637796: setBounds doesn't enlarge Component
- S6656651: Windows Look and Feel LCD glyph images have some differences from native applications.
- S6680198: UnmarshalException caused by incompatible serialVersionUID
- S6682046: Mixing code does not always recalculate shapes correctly when resizing components
- S6693253: Security Warning appearance requires enhancements
- S6725214: D3D: forward-port the new pipeline from 6u10
- S6742654: Code insertion/replacement attacks against signed jars
- S6748082: remove platform-specific code from SwingUtilities2.isDisplayLocal
- S6755274: 6u10b33 2d tests fails on sles10x64 with jvm crash
- S6769607: PIT : Modal frame hangs for a while for few seconds in 6u12 b01 pit build
- S6779717: A Window does not show applet security warning icon on X platforms
- S6785058: Parent dn't get the focus after dialog is closed if security warning is applied
- S6791612: OGLBat tests are failed in jdk 7 b42
- S6797195: Forward-port enhancements for hw/lw mixing from 6u12 to 7
- S6799345: JFC demos threw exception in the Java Console when applets are closed
- S6828273: javax/swing/system/6799345/TestShutdown.java test fails with RuntimeException.
- S6867515: Reduce impact of D3D initializion on startup time
- S6891435: Improve D3D preloading
- S6911041: JCK api/signaturetest tests fails for Mixed Code PIT builds (b91) for all trains
- S6921823: JarVerifier csdomain field not initialized
- S6921839: Update trusted.libraries list
- S6924497: HotSpotDiagnosticsMXBean.getDiagnosticOptions throws NPE
- S6936389: FontManager.fileCloser may cause memory leak in applets
- S6946559: AWTToolKit thread crashes in JNU_GetEnv
- S6955783: ServiceUnavailableException caught even the secondary DNS is available
- S6984543: Test sun/java2d/DirectX/OnScreenRenderingResizeTest fails on GNOME
- S6987967: D3D preloading thread should initialize COM
- S7011446: ./windows/classes/sun/awt/windows/WToolkit.java needs to avoid spurious wakeup
- S7015232: missing copyright header in CheckZOrderChange.java
- S7112642: Incorrect checking for graphics rendering object
- S7119760: [macosx] The OpenGL queue flusher thread is created in the wrong thread group
- S7155051: DNS provider may return incorrect results
- S8002191: AWT-Shutdown thread does not start with the AppletSecurity on Linux
- S8009071, CVE-2013-2459: Improve shape handling
- S8023046: Enhance splashscreen support
- S8025005: Enhance CORBA initializations
- S8025010, CVE-2014-2412: Enhance AWT contexts
- S8025030, CVE-2014-2414: Enhance stream handling
- S8025152, CVE-2014-0458: Enhance activation set up
- S8026067: Enhance signed jar verification
- S8026163, CVE-2014-2427: Enhance media provisioning
- S8026188, CVE-2014-2423: Enhance envelope factory
- S8026200: Enhance RowSet Factory
- S8026736, CVE-2014-2398: Enhance Javadoc pages
- S8026797, CVE-2014-0451: Enhance data transfers
- S8026801, CVE-2014-0452: Enhance endpoint addressing
- S8027766, CVE-2014-0453: Enhance RSA processing
- S8027775: Enhance ICU code.
- S8027841, CVE-2014-0429: Enhance pixel manipulations
- S8028385: Enhance RowSet Factory
- S8028388: 9 jaxws tests failed in nightly build with java.lang.ClassCastException
- S8029282, CVE-2014-2403: Enhance CharInfo set up
- S8029286: Enhance subject delegation
- S8029699: Update Poller demo
- S8029730: Improve audio device additions
- S8029735: Enhance service mgmt natives
- S8029740, CVE-2014-0446: Enhance handling of loggers
- S8029760, CVE-2013-6629: Enhance AWT image libraries (in-tree libjpeg)
- S8029854, CVE-2014-2421: Enhance JPEG decodings
- S8029858, CVE-2014-0456: Enhance array copies
- S8030731, CVE-2014-0460: Improve name service robustness
- S8031032: SQE test failures after JDK-8025010 was fixed
- S8031330: Refactor ObjectFactory
- S8031352, CVE-2013-6954: Enhance PNG handling (in-tree libpng)
- S8031394, CVE-2014-0457: (sl) Fix exception handling in ServiceLoader
- S8031395: Enhance LDAP processing
- S8031477: [macosx] Loading AWT native library fails
- S8032370: No "Truncated file" warning from IIOReadWarningListener on JPEGImageReader
- S8033618, CVE-2014-1876: Correct logging output
- S8034926, CVE-2014-2397: Attribute classes properly
- S8035834: InetAddress.getLocalHost() can hang after JDK-8030731 was fixed
- S8035893: JVM_GetVersionInfo fails to zero structure
- S8036794, CVE-2014-0461: Manage JavaScript instances
- OPENJDK-30: Remove @Override annotation on interfaces added by 2014/04/15 security fixes.
OK?
--
Andrew :)
Free Java Software Engineer
Red Hat, Inc. (http://www.redhat.com)
PGP Key: 248BDC07 (https://keys.indymedia.org/)
Fingerprint = EC5A 1F5E C0AD 1D15 8F1F 8F91 3B96 A578 248B DC07
More information about the jdk6-dev
mailing list