Mercurial > hg > release > icedtea6-1.7

changeset 1967:caae3106585d

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Add CVE numbers. 2010-07-27 Andrew John Hughes <ahughes@redhat.com> * NEWS: Add CVE numbers.
author Andrew John Hughes <ahughes@redhat.com>
date Tue, 27 Jul 2010 19:26:44 +0100
parents e5dc3c88292c
children 30dc9370beba
files ChangeLog NEWS
diffstat 2 files changed, 6 insertions(+), 2 deletions(-) [+]
line wrap: on
line diff
--- a/ChangeLog	Mon Jul 26 23:28:16 2010 +0100
+++ b/ChangeLog	Tue Jul 27 19:26:44 2010 +0100
@@ -1,3 +1,7 @@
+2010-07-27  Andrew John Hughes  <ahughes@redhat.com>
+
+	* NEWS: Add CVE numbers.
+
 2010-07-26  Andrew John Hughes  <ahughes@redhat.com>
 
 	* acinclude.m4: Give a warning about the
--- a/NEWS	Mon Jul 26 23:28:16 2010 +0100
+++ b/NEWS	Tue Jul 27 19:26:44 2010 +0100
@@ -1,8 +1,8 @@
 New in release 1.7.4 (2010-07-28):
 
 * NetX security issues:
-  - RH616895: IcedTea 'Extended JNLP Services' arbitrary file access
-  - RH616893: IcedTea Incomplete property access check for unsigned applications
+  - (CVE-2010-2783, RH616895): IcedTea 'Extended JNLP Services' arbitrary file access
+  - (CVE-2010-2548, RH616893): IcedTea Incomplete property access check for unsigned applications
 * Backport --with-tzdata-dir support from IcedTea6 1.8 to ensure
    that external timezone data works again.
 * Restore icedtea-override-metacity.patch to allow full screen apps and