[PATCH] jdk6-b43 retro-active security patch review

[Andrew Brygin]

Hello Dmitry,

 the change looks fine to me.

Thanks,
Andrew

On May 23, 2017, at 2:31 PM, Dmitry Cherepanov <dcherepanov at azul.com<mailto:dcherepanov at azul.com>> wrote:

Hello,

Here’s backport of security fixes (included in 8u131) to OpenJDK 6.

Changes since jdk6-b42

 * Security fixes:

8171533, CVE-2017-3544:  Better email transfer
8169011, CVE-2017-3526:  Resizing XML parse trees
8170222, CVE-2017-3533:  Better transfers of files
8171121, CVE-2017-3539:  Enhancing jar checking
8167110, CVE-2017-3514:  Windows peering issue
8163520, CVE-2017-3509:  Reuse cache entries

 * Defense-in-depth fixes:

8172299:  Improve class processing

 * Other fixes:

8174985:  NTLM authentication doesn't work with IIS if NTLM cache is disabled
8173931:  8u131 L10n resource file update
8170307:  Stack size option -Xss is ignored
8173783:  IllegalArgumentException: jdk.tls.namedGroups
6474807:  (smartcardio) CardTerminal.connect() throws CardException instead of CardNotPresentException
8150490:  Update OS detection code to recognize Windows Server 2016
7173645:  (props) System.getProperty("os.name") should return "Windows Server 2012" for Windows Server 2012
4717864:  setFont() does not update Fonts of Menus already on screen
7170169:  (props) System.getProperty("os.name") should return "Windows 8" when run on Windows 8
8161195:  Regression: closed/javax/swing/text/FlowView/LayoutTest.java
8167179:  Make XSL generated namespace prefixes local to transformation process
8170316:  (tz) Support tzdata2016j
8171388:  Update JNDI Thread contexts
8020191:  System.getProperty("os.name") returns "Windows NT (unknown)" on Windows 8.1
8130769:  The new menu can't be shown on the menubar after clicking the "Add" button.
8174844:  Incorrect GPL header causes RE script to miss swap to commercial header for licensee source bundle
8176044:  (tz) Support tzdata2017a
8170814:  Reuse cache entries (part II)
6592751:  EmbeddedFrame disposal is fragile and breaks clean AppContext termination
8066504:  GetVersionEx in java.base/windows/native/libjava/java_props_md.c might not get correct Windows version 0
8180769:  [openjdk6] JVM crashes when running with -showversion option


Webrevs for the changes:

http://cr.openjdk.java.net/~dcherepanov/openjdk6/April_2017/webrevs/root/webrev/
http://cr.openjdk.java.net/~dcherepanov/openjdk6/April_2017/webrevs/corba/webrev/
http://cr.openjdk.java.net/~dcherepanov/openjdk6/April_2017/webrevs/hotspot/webrev/
http://cr.openjdk.java.net/~dcherepanov/openjdk6/April_2017/webrevs/jaxp/webrev/
http://cr.openjdk.java.net/~dcherepanov/openjdk6/April_2017/webrevs/jaxws/webrev/
http://cr.openjdk.java.net/~dcherepanov/openjdk6/April_2017/webrevs/jdk/webrev/
http://cr.openjdk.java.net/~dcherepanov/openjdk6/April_2017/webrevs/langtools/webrev/

Please review.

Thanks,

Dmitry


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openjdk.java.net/pipermail/jdk6-dev/attachments/20170524/264ac326/attachment-0001.html>