Mercurial > hg > release > icedtea6-1.7
changeset 1967:caae3106585d
Add CVE numbers.
2010-07-27 Andrew John Hughes <ahughes@redhat.com>
* NEWS: Add CVE numbers.
author | Andrew John Hughes <ahughes@redhat.com> |
---|---|
date | Tue, 27 Jul 2010 19:26:44 +0100 |
parents | e5dc3c88292c |
children | 30dc9370beba |
files | ChangeLog NEWS |
diffstat | 2 files changed, 6 insertions(+), 2 deletions(-) [+] |
line wrap: on
line diff
--- a/ChangeLog Mon Jul 26 23:28:16 2010 +0100 +++ b/ChangeLog Tue Jul 27 19:26:44 2010 +0100 @@ -1,3 +1,7 @@ +2010-07-27 Andrew John Hughes <ahughes@redhat.com> + + * NEWS: Add CVE numbers. + 2010-07-26 Andrew John Hughes <ahughes@redhat.com> * acinclude.m4: Give a warning about the
--- a/NEWS Mon Jul 26 23:28:16 2010 +0100 +++ b/NEWS Tue Jul 27 19:26:44 2010 +0100 @@ -1,8 +1,8 @@ New in release 1.7.4 (2010-07-28): * NetX security issues: - - RH616895: IcedTea 'Extended JNLP Services' arbitrary file access - - RH616893: IcedTea Incomplete property access check for unsigned applications + - (CVE-2010-2783, RH616895): IcedTea 'Extended JNLP Services' arbitrary file access + - (CVE-2010-2548, RH616893): IcedTea Incomplete property access check for unsigned applications * Backport --with-tzdata-dir support from IcedTea6 1.8 to ensure that external timezone data works again. * Restore icedtea-override-metacity.patch to allow full screen apps and