Mercurial > hg > release > icedtea6-1.10
changeset 2594:bab6ae8c1c86
Update with latest security fixes.
2012-10-11 Andrew John Hughes <gnu.andrew@redhat.com>
* NEWS:
Update with latest security fixes.
author | Andrew John Hughes <ahughes@redhat.com> |
---|---|
date | Fri, 12 Oct 2012 02:20:06 +0100 |
parents | 6df81d93af9c |
children | 1fc1f8fb1d66 |
files | ChangeLog NEWS |
diffstat | 2 files changed, 30 insertions(+), 0 deletions(-) [+] |
line wrap: on
line diff
--- a/ChangeLog Fri Oct 12 02:18:24 2012 +0100 +++ b/ChangeLog Fri Oct 12 02:20:06 2012 +0100 @@ -1,3 +1,8 @@ +2012-10-11 Andrew John Hughes <gnu.andrew@redhat.com> + + * NEWS: + Update with latest security fixes. + 2012-10-11 Andrew John Hughes <gnu.andrew@redhat.com> * Makefile.am:
--- a/NEWS Fri Oct 12 02:18:24 2012 +0100 +++ b/NEWS Fri Oct 12 02:20:06 2012 +0100 @@ -11,6 +11,31 @@ New in release 1.10.10 (2012-XX-XX): +* Security fixes + - S6631398, CVE-2012-3216: FilePermission improved path checking + - S7093490: adjust package access in rmiregistry + - S7143535, CVE-2012-5068: ScriptEngine corrected permissions + - S7167656, CVE-2012-5077: Multiple Seeders are being created + - S7169884, CVE-2012-5073: LogManager checks do not work correctly for sub-types + - S7169888, CVE-2012-5075: Narrowing resource definitions in JMX RMI connector + - S7172522, CVE-2012-5072: Improve DomainCombiner checking + - S7186286, CVE-2012-5081: TLS implementation to better adhere to RFC + - S7189103, CVE-2012-5069: Executors needs to maintain state + - S7189490: More improvements to DomainCombiner checking + - S7189567, CVE-2012-5085: java net obselete protocol + - S7192975, CVE-2012-5071: Conditional usage check is wrong + - S7195194, CVE-2012-5084: Better data validation for Swing + - S7195917, CVE-2012-5086: XMLDecoder parsing at close-time should be improved + - S7195919, CVE-2012-5979: (sl) ServiceLoader can throw CCE without needing to create instance + - S7198296, CVE-2012-5089: Refactor classloader usage + - S7158800: Improve storage of symbol tables + - S7158801: Improve VM CompileOnly option + - S7158804: Improve config file parsing + - S7176337: Additional changes needed for 7158801 fix + - S7198606, CVE-2012-4416: Improve VM optimization +* Backports + - S7092186: adjust package access in rmiregistry + New in release 1.10.9 (2012-08-31): * Security fixes