--- a/ChangeLog	Mon Jun 02 14:48:27 2014 +0100
+++ b/ChangeLog	Thu Jul 24 05:03:40 2014 +0100
@@ -1,3 +1,7 @@
+2014-07-23  Andrew John Hughes  <gnu.andrew@redhat.com>
+
+	* NEWS: Add 1.13.4 release notes.
+
 2014-05-28  Andrew John Hughes  <gnu.andrew@redhat.com>
 
 	* Makefile.am:

--- a/NEWS	Mon Jun 02 14:48:27 2014 +0100
+++ b/NEWS	Thu Jul 24 05:03:40 2014 +0100
@@ -19,12 +19,52 @@
   - S6727719: Performance of TextLayout.getBounds()
   - S6745225: Memory leak while drawing Attributed String
   - S6904962: GlyphVector.getVisualBounds should not be affected by leading or trailing white space.
-  - S7027300, RH1098399: Unsynchronized HashMap access causes endless loop
   - S7151089: PS NUMA: NUMA allocator should not attempt to free pages when using SHM large pages
-  - S7183251: Netbeans editor renders text wrong on JDK 7u6 build
   - S8013057: Detect mmap() commit failures in Linux and Solaris os::commit_memory() impls and call vm_exit_out_of_memory()
   - S8026887: Make issues due to failed large pages allocations easier to debug
 
+New in release 1.13.4 (2014-07-15):
+
+* Security fixes
+  - S8029755, CVE-2014-4209: Enhance subject class
+  - S8030763: Validate global memory allocation
+  - S8031346, CVE-2014-4244: Enhance RSA key handling
+  - S8031540: Introduce document horizon
+  - S8032536: JVM resolves wrong method in some unusual cases
+  - S8033055: Issues in 2d
+  - S8033301, CVE-2014-4266: Build more informative InfoBuilder
+  - S8034267: Probabilistic native crash
+  - S8034272: Do not cram data into CRAM arrays
+  - S8035004, CVE-2014-4252: Provider provides less service
+  - S8035009, CVE-2014-4218: Make Proxy representations consistent
+  - S8035119, CVE-2014-4219: Fix exceptions to bytecode verification
+  - S8035699, CVE-2014-4268: File choosers should be choosier
+  - S8036571: (process) Process process arguments carefully
+  - S8036800: Attribute OOM to correct part of code
+  - S8037046: Validate libraries to be loaded
+  - S8037157: Verify <init> call
+  - S8037076, CVE-2014-2490: Check constant pool constants
+  - S8037162, CVE-2014-4263: More robust DH exchanges
+  - S8037167, CVE-2014-4216: Better method signature resolution
+  - S8039520, CVE-2014-4262: More atomicity of atomic updates
+* Import of OpenJDK6 b32
+  - OJ32: OpenJDK6-b31 isn't compatible with Windows platform
+  - OJ33: Update copyright headers introduced by the fix for OPENJDK6-32
+  - OJ34: OpenJDK6-b31 backport of JDK-6638712 to openjdk6
+  - OJ35: backport of JDK-6650759 to openjdk6
+  - OJ36: Fix a mistake in backport of 8035119
+  - S8013611: Modal dialog fails to obtain keyboard focus
+  - S8013836: getFirstDayOfWeek reports wrong day for pt-BR locale
+  - S8028111: XML readers share the same entity expansion counter
+  - S8028285: RMI Thread can no longer call out to AWT
+  - S8029038: Revise fix for XML readers share the same entity expansion counter
+  - S8042582: Test java/awt/KeyboardFocusmanager/ChangeKFMTest/ChangeKFMTest.html fails on Windows x64
+  - S8042590: Running form URL throws NPE
+  - S8042789: org.omg.CORBA.ORBSingletonClass loading no longer uses context class loader
+* Backports
+  - S7027300, RH1098399: Unsynchronized HashMap access causes endless loop
+  - S7183251: Netbeans editor renders text wrong on JDK 7u6 build
+
 New in release 1.13.3 (2014-04-15):
 
 * Security fixes