[SECURITY] IcedTea 2.3.1 Released!

[Andrew Hughes]

----- Original Message -----
> On 30.08.2012 14:44, Andrew Hughes wrote:
> > 
> > 
> > ----- Original Message -----
> >> On 30.08.2012 02:51, Andïï wrote:
> >>> We are pleased to announce the release of IcedTea 2.3.1 [*],
> >>> based
> >>> on
> >>> OpenJDK7 u6.
> >>
> >> apparently the release tarball is unusable for any zero build.
> >> While
> >> the
> >> ChangeLog claims that the patches are included, they are not. At
> >> least this
> >> change is missing from the release tarball:
> >>
> >> 2012-08-29  Andrew John Hughes  <gnu_andrew at member.fsf.org>
> >>
> >>         * Makefile.am:
> >>         (EXTRA_DIST): Add HotSpot-specific patches.
> >>
> >> I didn't check for any other things missing in the release
> >> tarball.
> >>
> >>   Matthias
> >>
> >>
> >>
> > 
> > No it's not.
> 
> You are wrong.

No I'm right.  That change is there.  It adds patches/boot/hotspot/.
You're right in that it doesn't add patches/hotspot but that's not
what that change did.  Claiming that change isn't there is a misnomer.

> 
> > $ tar xzf /var/lib/public-download/source/icedtea-2.3.1.tar.gz
> > $ ls patches/boot/hotspot/
> > default  zero
> > 
> > $ cat ChangeLog |grep EXTRA_DIST
> > 	(EXTRA_DIST): Add HotSpot-specific patches.
> 
> not patches/boot/hotspot is missing, but patches/hotspot, which are
> referenced
> when ALT_HSBUILD is set:
> 
> # Conditional patches
> 
> if WITH_ALT_HSBUILD
> ICEDTEA_PATCHES += \
>         patches/hotspot/$(HSBUILD)/7089790-bsd_port.patch \
>         patches/hotspot/$(HSBUILD)/7098194-macosx_port.patch \
>         patches/hotspot/$(HSBUILD)/7116189-setnativethreadname.patch
>         \
>         patches/hotspot/$(HSBUILD)/6924259-string_offset.patch \
>         patches/hotspot/$(HSBUILD)/revert_arm_debug.patch
> endif
> 

The problem is that these patches are only checked if that option is on
so they weren't caught by either the make distcheck or normal build with
that tarball.

I'll put out a 2.3.2 release for Zero later, and check CACAO/JamVM while
I'm at it.

Too many options...

> 
> 

-- 
Andrew :)

Free Java Software Engineer
Red Hat, Inc. (http://www.redhat.com)

PGP Key: 248BDC07 (https://keys.indymedia.org/)
Fingerprint = EC5A 1F5E C0AD 1D15 8F1F  8F91 3B96 A578 248B DC07