Upcoming releases of IcedTea-Web 1.2, 1.3, 1.4

[Jiri Vanek]

On 04/17/2013 10:58 AM, Jiri Vanek wrote:
> On 04/10/2013 06:20 PM, Jiri Vanek wrote:
>> On 04/05/2013 10:58 AM, Jiri Vanek wrote:
>>> Hi all!
>>>
>>> There are two releases of IcedTea-Web approaching:
>>>
>>> We would like to release 1.2 and 1.3 in 17th of April
>>> Please count with freezing of branches in week 10-17.4, but there is not so much traffic on
>>> branches anyway.
>>>
>>> At 1th of May is planed release of IcedTea-Web 1.4!
>>> This release is bringing many improvements and IcedTea-Web was never as stable as is now. I would
>>> like to encourage every distribution to move to this release.
>>> Unless something unlucky will be found in 1.4, some time later the 1.2 will be proclaimed dead.
>>> Please count with head frozen in last week of April.
>>>
>>> Best regards
>>> J.
>>
>> Hi!
>>
>>
>> With the approaching release of IcedTea-Web 1.2.3 and 1.3.2, please
>> consider /release/icedtea-web-1.2/ and /release/icedtea-web-1.3/ frozen.
>>
>>
>> 1.2:
>> - PR1161: X509VariableTrustManager does not work correctly with OpenJDK7
>> - PR1157: Applets can hang browser after fatal exception
>>
>> 1.3
>> - Added new option in itw-settings which allows users to set JVM arguments when plugin is
>> initialized. (backport)
>> PR1260: IcedTea-Web should not rely on GTK
>> PR1157: Applets can hang browser after fatal exception
>> Provide names for unnamed threads for better debugging
>>
>> Both releases will also contain a (currently embargoed) security fix.
>>
>> Thanks for your for patience, understanding and contributions!
>>
>>
>> J.
>>
>>
>
> The branches are out[1] and unfrozen, feel free to use and cross finger for upcoming 1.4:)
>
> J.
>
> [1] http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-April/022790.html

Hi all!

Although feature and enhancement list for icedtea-web-1.4 (from users point of view) is compelte, release itself can be a bit delayed because of several issues caused by core improvements and by few missing tests.
I'm sorry for troubles but meanwhile I'm offering pre-release tarball for playing and testing:)

http://icedtea.wildebeest.org/download/source/icedtea-web-1.4pre1.tar.gz


I hope that "regressions" or how to call those issues will be fixed asap.

Sorry and thank you
   J.

New in IcedTea-Web 1.4

* Numerous improvements and enhancements in core and system of classloaders
* Added cs_CZ localization
* Added de localization
* Splash screen for javaws and plugin
* Better error reporting for plugin via Error-splash-screen
* All IcedTea-Web dialogues are centered to middle of active screen
* Download indicator made compact for more then one jar
* User can select its own JVM via itw-settings and deploy.properties.
* Added extended applets security settings and dialogue
* Security updates
   - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path.
   - CVE-2013-1927, RH884705: fixed gifar vulnerabilit
   - CVE-2012-3422, RH840592: Potential read from an uninitialized memory location
   - CVE-2012-3423, RH841345: Incorrect handling of not 0-terminated strings
* NetX
   - PR1027: DownloadService is not supported by IcedTea-Web
   - PR725: JNLP applications will prompt for creating desktop shortcuts every time they are run
   - PR1292: Javaws does not resolve versioned jar names with periods correctly
* Plugin
   - PR1106: Buffer overflow in plugin table-
   - PR1166: Embedded JNLP File is not supported in applet tag
   - PR1217: Add command line arguments for plugins
   - PR1189: Icedtea-plugin requires code attribute when using jnlp_href
   - PR1198: JSObject is not passed to javascript correctly
   - PR1260: IcedTea-Web should not rely on GTK
   - PR1157: Applets can hang browser after fatal exception
   - PR580: http://www.horaoficial.cl/ loads improperly
* Common
   - PR1049: Extension jnlp's signed jar with the content of only META-INF/* is considered
   - PR955: regression: SweetHome3D fails to run
   - PR1145: IcedTea-Web can cause ClassCircularityError
   - PR1161: X509VariableTrustManager does not work correctly with OpenJDK7
   - PR822: Applets fail to load if jars have different signers
   - PR1186: System.getProperty("deployment.user.security.trusted.cacerts") is null
   - PR909: The Java applet at http://de.gosupermodel.com/games/wardrobegame.jsp fails
   - PR1299: WebStart doesn't read socket proxy settings from firefox correctly



People who helped with this release (If I forgot somebody, please let me know!):


Deepak Bhole <dbhole at redhat.com>
Danesh Dadachanji <ddadacha at redhat.com>
Adam Domurad <adomurad at redhat.com>
Jana Fabrikova <jfabriko at redhat.co>
Peter Hatina <phatina at redhat.com>
Andrew John Hughes <ahughes at redhat.com>
Matthias Klose <doko at ubuntu.com>
Alexandr Kolouch <skolnag at gmail.com>
Jan Kmetko <jan.kmetko.ml at gmail.com>
Omair Majid <omajid at redhat.com>
Thomas Meyer <thomas at m3y3r.de>
Saad Mohammad <smohammad at redhat.com>
Martin Olsson  <martin at minimum.se>
Pavel Tisnovsky <ptisnov at redhat.com>
Jiri Vanek <jvanek at redhat.com>
Jacob Wisor  <gitne at excite.co.jp>


Special thanks to:

  * Adam Domurad - for deep investigations and  fixes in core, and in numerous classloaders or otherwise complicated bugs
  * Jan Kmetko - for initial design of splashscreen
  * Deepak Bhole and Omair Majid - for ever keeping an watchful eye on patches
  * to community - namely:
    -  Jacob Wisor and Alexandr Kolouch  - who voluntary offered and delivered Pl and Cz translation