Key:

SX  - http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=X
PRX - http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=X
RHX - https://bugzilla.redhat.com/show_bug.cgi?id=X
DX  - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=X
GX  - http://bugs.gentoo.org/show_bug.cgi?id=X
CAX - http://server.complang.tuwien.ac.at/cgi-bin/bugzilla/show_bug.cgi?id=X
LPX - https://bugs.launchpad.net/bugs/X

CVE-XXXX-YYYY: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=XXXX-YYYY

New in release 2.1.3 (2012-10-17):

* Security fixes
  - S6631398, CVE-2012-3216: FilePermission improved path checking
  - S7093490: adjust package access in rmiregistry
  - S7143535, CVE-2012-5068: ScriptEngine corrected permissions
  - S7158796, CVE-2012-5070: Tighten properties checking in EnvHelp
  - S7158807: Revise stack management with volatile call sites
  - S7163198, CVE-2012-5076: Tightened package accessibility
  - S7167656, CVE-2012-5077: Multiple Seeders are being created
  - S7169884, CVE-2012-5073: LogManager checks do not work correctly for sub-types
  - S7169887, CVE-2012-5074: Tightened package accessibility
  - S7169888, CVE-2012-5075: Narrowing resource definitions in JMX RMI connector
  - S7172522, CVE-2012-5072: Improve DomainCombiner checking
  - S7186286, CVE-2012-5081: TLS implementation to better adhere to RFC
  - S7189103, CVE-2012-5069: Executors needs to maintain state
  - S7189490: More improvements to DomainCombiner checking
  - S7189567, CVE-2012-5085: java net obselete protocol
  - S7192975, CVE-2012-5071: Issue with JMX reflection
  - S7195194, CVE-2012-5084: Better data validation for Swing
  - S7195549, CVE-2012-5087: Better bean object persistence
  - S7195917, CVE-2012-5086: XMLDecoder parsing at close-time should be improved
  - S7195919, CVE-2012-5979: (sl) ServiceLoader can throw CCE without needing to create instance
  - S7196190, CVE-2012-5088: Improve method of handling MethodHandles
  - S7198296, CVE-2012-5089: Refactor classloader usage
  - S7158801: Improve VM CompileOnly option
  - S7158804: Improve config file parsing
  - S7198606, CVE-2012-4416: Improve VM optimization
* Backports
  - S7175845: "jar uf" changes file permissions unexpectedly
  - S7177216: native2ascii changes file permissions of input file
  - S7106773: 512 bits RSA key cannot work with SHA384 and SHA512
* Bug fixes
  - Remove merge artefact.
  - Remove the Xp header and library checks.

New in release 2.1.2 (2012-09-02):

* Security fixes
  - RH852051, CVE-2012-4681, S7162473: Reintroduce PackageAccessible checks removed in 6788531.
  - S7162476, CVE-2012-1682: XMLDecoder security issue via ClassFinder
  - S7194567, CVE-2012-3136: Improve long term persistence of java.beans objects
  - S7163201, CVE-2012-0547: Simplify toolkit internals references
* OpenJDK
  - PR1101: Undefined symbols on GNU/Linux SPARC
  - S7182135: Impossible to use some editors directly
  - S7183701: [TEST] closed/java/beans/security/TestClassFinder.java - compilation failed
  - S7185678: java/awt/Menu/NullMenuLabelTest/NullMenuLabelTest.java failed with NPE
  - S7190813: (launcher) RPATH needs to have additional paths
* ARM
  - ARM: Fix trashed thread ptr after recursive re-entry from
  - ARM: Rename a bunch of misleadingly-named functions
  - Enable _adapter_opt_spread* jsr 292 code, now passes
  - Fix call to handle_special_method().  Fix compareAndSwapLong.

New in release 2.1.1 (2012-06-12):

* Security fixes
  - S7079902, CVE-2012-1711: Refine CORBA data models
  - S7110720: Issue with vm config file loadingIssue with vm config file loading
  - S7143606, CVE-2012-1717: File.createTempFile should be improved for temporary files created by the platform.
  - S7143614, CVE-2012-1716: SynthLookAndFeel stability improvement
  - S7143617, CVE-2012-1713: Improve fontmanager layout lookup operations
  - S7143851, CVE-2012-1719: Improve IIOP stub and tie generation in RMIC
  - S7143872, CVE-2012-1718: Improve certificate extension processing
  - S7145239: Finetune package definition restriction
  - S7152811, CVE-2012-1723: Issues in client compiler
  - S7157609, CVE-2012-1724: Issues with loop
  - S7160677: missing else in fix for 7152811
  - S7160757, CVE-2012-1725: Problem with hotspot/runtime_classfile
  - S7165628, CVE-2012-1726: Issues with java.lang.invoke.MethodHandles.Lookup
* Bug fixes
  - PR885: IcedTea7 does not build scripting support
  - Fix bug whereby JPEG_LIBS were not set by jdk_generic_profile.sh
  - S7150392: Linux build breaks with GCC 4.7 due to unrecognized option
  - Support glib >= 2.32.
* ARM port
  - Add arm_port from IcedTea 6
  - added jvmti event generation for dynamic_generate and compiled_method_load events to ARM JIT compiler
  - Adjust saved SP when safepointing.
  - ARM: First cut of invokedynamic
  - ARM: JIT-compilation of ldc methodHandle
  - Changes for HSX22
  - corrected call from fast_method_handle_entry to CppInterpreter::method_handle_entry so that thread is loaded into r2
  - Don't save locals at a return.
  - Fix JIT bug that miscompiles org.eclipse.ui.internal.contexts.ContextAuthority.sourceChanged
  - invokedynamic and aldc for JIT
  - Minor review cleanups.
  - modified safepoint check to rely on memory protect signal instead of polling
  - patched method handle adapter code to deal with failures in TCK
  - Phase 1
  - Phase 2
  - RTC Thumb2 JIT enhancements.
  - Zero fails to build in hsx22+, fix for hsx22 after runs gamma OK, hsx23 still nogo.
  - Use ldrexd for atomic reads on ARMv7.
  - Use unified syntax for thumb code.

New in release 2.1 (2012-02-14):

* Security fixes
  - S7082299, CVE-2011-3571: Fix in AtomicReferenceArray
  - S7088367, CVE-2011-3563: Fix issues in java sound
  - S7110683, CVE-2012-0502: Issues with some KeyboardFocusManager method
  - S7110687, CVE-2012-0503: Issues with TimeZone class
  - S7110700, CVE-2012-0505: Enhance exception throwing mechanism in ObjectStreamClass
  - S7110704, CVE-2012-0506: Issues with some method in corba
  - S7112642, CVE-2012-0497: Incorrect checking for graphics rendering object
  - S7118283, CVE-2012-0501: Better input parameter checking in zip file processing
  - S7126960, CVE-2011-5035: Add property to limit number of request headers to the HTTP Server
* Bug fixes
  - S4909150: WindowsTreeUI can cause NullPointerException occasionally
  - S4965777: GC changes to support use of discovered field for pending references
  - S6476261: (reflect) GenericSignatureFormatError When signature includes nested inner classes
  - S6478991: C1 NullCheckEliminator yields incorrect exceptions
  - S6484982: G1: process references during evacuation pauses
  - S6591247: C2 cleans up the merge point too early during SplitIf
  - S6670868: StackOverFlow with authenticated Proxy tunnels
  - S6735320: StringIndexOutOfBoundsException for empty @serialField tag
  - S6791672: enable 1G and larger pages on solaris
  - S6810861: G1: support -XX:+{PrintClassHistogram,HeapDump}{Before,After}FullGC
  - S6814390: G1: remove the concept of non-generational G1
  - S6898310: (cs) Charset cache lookups should be synchronized
  - S6916968: CMS: freeList.cpp:304 assert(_allocation_stats.prevSweep() + ..., "Conservation Principle")
  - S6918185: Remove unused code for lost card-marking optimization in BacktraceBuilder
  - S6929868: G1: introduce min / max young gen size bounds
  - S6941169: XML parsing cannot be trusted
  - S6941923: RFE: Handling large log files produced by long running Java Applications
  - S6951623: 3/3 possible performance problems in FollowReferences() and GetObjectsWithTags()
  - S6956668: misbehavior of XOR operator (^) with int
  - S6963006: Javacard exception when trying to access card during read operation
  - S6990015: Incorrect Icache line size is used for 64 bit x86
  - S6990212: JSR 292 JVMTI MethodEnter hook is not called for JSR 292 bootstrap and target methods
  - S6994322: Remove the is_tlab and is_noref / is_large_noref parameters from the CollectedHeap
  - S7004681: G1: Extend marking verification to Full GCs
  - S7012081: JSR 292: SA-JDI can't read MH/MT/Indy ConstantPool entries
  - S7012206: ~20 tools tests failing due to -XX:-UsePerfData default in Java SE Embedded
  - S7012364: test/java/util/Locale/LocaleCategory.sh fails on Cygwin
  - S7012783: JFileChooser fails to resolve DFS links on Windows Vista SP2
  - S7016112: CMS: crash during promotion testing
  - S7016797: Hotspot: securely/restrictive load dlls and new API for loading system dlls
  - S7016881: JSR 292: JDI: sun.jvm.hotspot.utilities.AssertionFailure: index out of bounds
  - S7019773: Problem with java/classes_awt
  - S7019963: The goto parent directory button doesn't operate in JFileChooser
  - S7020373: JSR rewriting can overflow memory address size variables
  - S7022113: Security icon can be moved behind the window using the com.sun.SecurityWarning.setPosition() method
  - S7024697: SessionRef.dispose() should determine if the token referred to by the token object is still valid
  - S7029903: Splash screen is not shown in 64-bit Linux with 16-bit color depth
  - S7030332: Default borders in tables looks incorrect JEditorPane
  - S7031830: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
  - S7032531: G1: enhance GC logging to include more accurate eden / survivor size transitions
  - S7033141: assert(has_cp_cache(i)) failed: oob
  - S7035946: Up to 15% regression on JDK 7 b136 vs b135 on specjvm2008.crypto.rsa on x64
  - S7039182: PPC: NIO: java.io.IOException: Invalid argument in sun.nio.ch.FileDispatcherImpl.read0
  - S7039627: G1: avoid BOT updates for survivor allocations and dirty survivor regions incrementally
  - S7039731: arraycopy could use prefetch on SPARC
  - S7041125: LDAP API does not catch malformed filters that contain two operands for the ! operator
  - S7041800: URI.equals may incorrectly return true with escaped octets
  - S7042148: closed/java/awt/font/TextLayout/CheckLayoutLTR.java failed
  - S7042740: CMS: assert(n> q) failed: Looping at: ... blockOffsetTable.cpp:557
  - S7043737: klist does not detect non-existing keytab
  - S7043847: NTML impl of SaslServer throws UnsupportedOperationException from (un)wrap method
  - S7043987: 3/3 JVMTI FollowReferences is slow
  - S7044486: open jdk repos have files with incorrect copyright headers, which can end up in src bundles
  - S7044738: Loop unroll optimization causes incorrect result
  - S7045232: G1: pool names are inconsistent with other collectors (don't have 'Space')
  - S7045330: G1: Simplify/fix the HeapRegionSeq class
  - S7045514: SPARC assembly code for JSR 292 ricochet frames
  - S7045662: G1: OopsInHeapRegionClosure::set_region() should not be virtual
  - S7045697: JDK7 THIRD PARTY README update
  - S7045751: G1: +ExplicitGCInvokesConcurrent causes excessive single region evacuation pauses
  - S7046182: G1: remove unnecessary iterations over the collection set
  - S7046490: Preallocated OOME objects should obey Throwable stack trace protocol
  - S7046558: G1: concurrent marking optimizations
  - S7046778: Project Coin: problem with diamond and member inner classes
  - S7047069: Array can dynamically change size when assigned to an object field
  - S7047325: Internal API to improve management of direct buffers
  - S7047491: C1: registers saved incorrectly when calling checkcast_arraycopy stub
  - S7047697: MethodHandle.invokeExact call for wrong method causes VM failure if run with -Xcomp
  - S7047954: VM crashes with assert(is_Mem()) failed
  - S7047961: JSR 292 MethodHandleWalk swap args doesn't handle T_LONG and T_DOUBLE properly
  - S7048009: Update .jcheck/conf files for JDK 8
  - S7048332: Cadd_cmpLTMask doesn't handle 64-bit tmp register properly
  - S7048342: CMS: eob == _limit || fc->isFree() failed: Only a free chunk should allow us to cross over the limit
  - S7048782: CMS: assert(last_chunk_index_to_check<= last_chunk_index) failed: parCardTableModRefBS.cpp:359
  - S7049079: NTSYSTEM CLASS IS LEAKING WINDOWS TOKENS
  - S7049339: AnyBlit is broken with non-rectangular clips.
  - S7049410: JSR 292 old method name MethodHandle.invokeGeneric should not be accepted by the JVM
  - S7049415: Failure of resolution of sym.reference to the c.s.s. should be wrapped in BootstrapMethodError
  - S7049774: UID construction appears to hang if time changed backwards
  - S7049928: VM crashes with "assert(_adapter != NULL) failed: must have" at methodOop.cpp:63
  - S7049963: DISTINGUISHED NAMES FOR CERT ARE ESCAPED IN JROCKIT 1.6(NOT COMPATIBLE WITH JROC
  - S7049999: G1: Make the G1PrintHeapRegions output consistent and complete
  - S7050280: assert(u->as_Unlock()->is_eliminated()) failed: sanity
  - S7050392: G1: Introduce flag to generate a log of the G1 ergonomic decisions
  - S7050554: JSR 292 - need optimization for selectAlternative
  - S7050826: Hebrew characters are not rendered on OEL 5.6
  - S7050935: closed/java/awt/Choice/WheelEventsConsumed/WheelEventsConsumed.html fails on win32
  - S7051430: CMS: ongoing CMS cycle should terminate abruptly to allow prompt JVM termination at exit
  - S7051516: ThreadLocalRandom seed is never initialized so all instances generate the same sequence
  - S7051798: SA-JDI: NPE in Frame.addressOfStackSlot(Frame.java:244)
  - S7052219: JSR 292: Crash in ~BufferBlob::MethodHandles adapters
  - S7052494: Eclipse test fails on JDK 7 b142
  - S7052988: JPRT embedded builds don't set MINIMIZE_RAM_USAGE
  - S7053189: remove some unnecessary platform-dependent includes
  - S7053520: JSR292: crash in invokedynamic with C1 using tiered and compressed oops
  - S7054211: No loop unrolling done in jdk7b144 for a test update() while loop
  - S7054637: Enable PKCS11 to use raw encoding for the EC point in an Elliptic Curve public key
  - S7055073: G1: code cleanup in the concurrentMark.* files
  - S7055247: Ignore test of # 7020373
  - S7055355: JSR 292: crash while throwing WrongMethodTypeException
  - S7056328: JSR 292 invocation sometimes fails in adapters for types not on boot class path
  - S7056380: VM crashes with SIGSEGV in compiled code
  - S7057046: Add embedded license to THIRD PARTY README
  - S7057120: Tiered: Allow C1 to inline methods with loops
  - S7057297: Project Coin: diamond erroneously accepts in array initializer expressions
  - S7057459: Regression:  Performance degradation with java.beans.XMLEncoder
  - S7057705: can't generate api docs for JDK7 updates
  - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks
  - S7057857: SIGSEGV [libunpack.so] store_Utf8_char(signed char*, unsigned short) in java.util.jar.pack200
  - S7057978: improve robustness of c1 ARM back-end wrt non encodable constants
  - S7058036: FieldsAllocationStyle=2 does not work in 32-bit VM
  - S7058510: multinewarray with 6 dimensions uncommon traps in server compiler
  - S7058689: Tiered: Reprofiling doesn't happen in presence of level 4 OSR methods
  - S7058828: test/java/util/concurrent/Phaser/Arrive.java fails intermittently
  - S7059019: G1: add G1 support to the SA
  - S7059034: Use movxtod/movdtox on T4
  - S7059037: Use BIS for zeroing on T4
  - S7059259: (process) ProcessBuilder.start permission check should be improved when redirecting output to append
  - S7059905: (javadoc) promote method visibility for netbeans usage
  - S7060619: C1 should respect inline and dontinline directives from CompilerOracle
  - S7060642: (javadoc) improve performance on accessing inlinedTags
  - S7060836: RHEL 5.5 and 5.6 should support UseNUMA
  - S7060842: UseNUMA crash with UseHugreTLBFS running SPECjvm2008
  - S7060926: Attr.PostAttrAnalyzer misses a case
  - S7061101: adlc should complain about mixing block and expression forms of ins_encode
  - S7061125: Proposed javac argument processing performance improvement
  - S7061187: need some includes for arm/ppc
  - S7061192: option handling adjustments for oracle and embedded builds
  - S7061197: ThreadLocalStorage sp map table should be optional
  - S7061204: clean the chunk table synchronously in embedded builds
  - S7061212: use o/s low memory notification in embedded builds
  - S7061225: os::print_cpu_info() should support os-specific data
  - S7061379: [Kerberos] Cross-realm authentication fails, due to nameType problem
  - S7061691: Fork HS21 to HS22 - renumber Minor and build numbers of JVM
  - S7061768: Backout fix # 6941169
  - S7062745: Regression: difference in overload resolution when two methods are maximally specific
  - S7062856: Disassembler needs to be smarter about finding hsdis after 1.7 launcher changes
  - S7062969: java -help still shows http://java.sun.com/javase/reference
  - S7063628: Use cbcond on T4
  - S7063629: use cbcond in C2 generated code on T4
  - S7064279: Introspector.getBeanInfo() should release some resources in timely manner
  - S7064544: (javadoc) miscellaneous fixes requested by netbeans
  - S7065535: Mistyped function name that disabled UseLargePages on Windows
  - S7065972: Some race condition may happen in SSLSocketImpl class
  - S7066143: JSR 292: Zero support after regressions from 7009923 and 7009309
  - S7066203: Update currency data to the latest ISO 4217 standard
  - S7066339: Tiered: policy should make consistent decisions about osr levels
  - S7066490: @since 1.7 tag is missing for java.util.regex.Matcher.group(java.lang.String)
  - S7066713: Separate demos from the bundles on Solaris and Linux
  - S7066841: remove MacroAssembler::br_on_reg_cond() on sparc
  - S7067288: compiler regression test Test7052494 timeouts with client VM
  - S7067784: TEST: move testcase for # 7023640 from open to close in 7u1
  - S7067811: Update demo/sample code to state it should not be used for production
  - S7067922: (launcher) java -jar throws NPE if JAR file does not contain Main-Class attribute
  - S7067974: multiple ETYPE-INFO-ENTRY with same etype and different salt
  - S7068047: DnDMerlinQLTestsuite_DnDJTextArea test fails with an java.awt.dnd.InvalidDnDOperationException
  - S7068051: SIGSEGV in PhaseIdealLoop::build_loop_late_post
  - S7068215: G1: Print reference processing time during remark
  - S7068240: G1: Long "parallel other time" and "ext root scanning" when running specific benchmark
  - S7068328: BufferPoolMXBean and PlatformLoggingMXBean getObjectName may return null
  - S7068416: Lightweight HTTP Server should support TCP_NODELAY
  - S7068437: Regression: Filer.getResource(SOURCE_OUTPUT, ...) no longer works in JDK 7 w/o -s
  - S7068451: Regression: javac compiles fixed sources against previous, not current, version of generated sources
  - S7068902: (javac) allow enabling or disabling of String folding
  - S7069176: Update the JDK version numbers in Hotspot for JDK 8
  - S7069452: Cleanup NodeFlags
  - S7069863: G1: SIGSEGV running SPECjbb2011 and -UseBiasedLocking
  - S7070061: Adjust Hotspot make/jprt.properties for new JDK8 settings
  - S7070134: Hotspot crashes with sigsegv from PorterStemmer
  - S7071166: LayoutStyle.getPreferredGap()  - IAE is expected but not thrown
  - S7071246: Enclosing string literal in parenthesis in switch-case crashes javac
  - S7071248: IME composition window does not disappear when file dialog is closed : Japanese WinXP
  - S7071307: MethodHandle bimorphic inlining should consider the frequency
  - S7071427: AdapterFingerPrint can hold 8 entries per int
  - S7071609: javax/swing/JPopupMenu/6694823/bug6694823.java failed on solaris10
  - S7071653: JSR 292: call site change notification should be pushed not pulled
  - S7071709: JSR 292: switchpoint invalidation should be pushed not pulled
  - S7071823: Zero: zero/shark doesn't build after b147-fcs
  - S7071904: 4/4 HotSpot: Full Debug Symbols
  - S7072527: CMS: JMM GC counters overcount in some cases
  - S7072645: Toolkit.addPropertyChangeListener(name, pcl) throws NPE for null name
  - S7073337: Crash after playing Java game on Pogo
  - S7073491: -Dsun.net.maxDatagramSockets=1 does not work correctly with system.gc()
  - S7073508: Regression: NullPointerException at com.sun.tools.javac.code.Lint$AugmentVisitor.augment
  - S7073631: (javac) javac parser improvements for error position reporting
  - S7073913: The fix for 7017193 causes segfaults
  - S7074017: Introduce MemBarAcquireLock/MemBarReleaseLock nodes for monitor enter/exit code paths
  - S7074189: some javac tests fail with latest jtreg 4.1 b03
  - S7074386: fallback to fontconfig.<major_version>.bfc/properties if fontconfig.<major_version>.<minor_version>.
  - S7074416: Regression: JSR199: javac doesn't unwrap clientcodewrapper objects
  - S7074579: G1: JVM crash with JDK7 running ATG CRMDemo Fusion App
  - S7075098: Remove unused fdlibm files
  - S7075105: WIN: Provide a way to format HTML on drop
  - S7075559: JPRT windows_x64 build failure
  - S7075623: 6990212 broke raiseException in 64 bit
  - S7075646: G1: fix inconsistencies in the monitoring data
  - S7076831: TEST_BUG: compiler/5091921/Test7005594.java fails on LOW MEM SYSTEMS
  - S7077439: Possible reference through NULL in loopPredicate.cpp:726
  - S7077769: (zipfs) ZipFileSystem.writeCEN() writes wrong "data size" for ZIP64 extended information extra field
  - S7077806: ARM: java.lang.InternalError: bound subword value does not fit into the subword type
  - S7078382: JSR 292: don't count method handle adapters against inlining budgets
  - S7079317: Incorrect branch's destination block in PrintoOptoAssembly output
  - S7079329: Adjust allocation prefetching for T4
  - S7079626: x64 emits unnecessary REX prefix
  - S7079673: JSR 292: C1 should inline bytecoded method handle adapters
  - S7079769: JSR 292: incorrect size() for CallStaticJavaHandle on sparc
  - S7080038: (ann) Serializable types in sun.reflect.annotation do not declare serialVersionUIDs
  - S7080289: java/awt/AWTKeyStroke/AlienClass/Test2.java failed on jdk1.5.0_32b02 but passed on previous build
  - S7080389: G1: refactor marking code in evacuation pause copy closures
  - S7080431: VM asserts if specified size(x) in .ad is larger than emitted size
  - S7081012: REGRESSION:Component.transferFocusBackward invokes clearGlobalFocusOwner()
  - S7081064: G1: remove develop params G1FixedSurvivorSpaceSize, G1FixedTenuringThreshold, and G1FixedEdenSize
  - S7081251: bump the hs22 build number to 02
  - S7081926: assert(VM_Version::supports_sse2()) failed: must support
  - S7082220: Visual Studio projects broken after change 7016797: Hotspot: securely/restrictive load dlls and new
  - S7082263: Reflection::resolve_field/field_get/field_set are broken
  - S7082631: JSR 292: need profiling support in GWTs
  - S7082645: Hotspot doesn't compile on old linuxes after 7060836
  - S7082689: allow duplicate bug ids in jdk7u repos
  - S7082769: FileInputStream/FileOutputStream/RandomAccessFile allow file descriptor be closed when still in use
  - S7082949: JSR 292: missing ResourceMark in methodOopDesc::make_invoke_method
  - S7082969: NUMA interleaving
  - S7083184: JSR 292: don't store context class argument with call site dependencies
  - S7083786: dead various dead chunks of code
  - S7083916: Bump the hs22 build number to 03
  - S7084509: G1: fix inconsistencies and mistakes in the young list target length calculations
  - S7085012: ARM: com/sun/jdi/PopSynchronousTest.java still fails
  - S7085137: -XX:+VerifyOops is broken
  - S7085279: C1 overflows code buffer with VerifyOops and CompressedOops
  - S7085404: JSR 292: VolatileCallSites should have push notification too
  - S7085860: JSR 292: implement CallSite.setTargetNormal and setTargetVolatile as native methods
  - S7085906: Replace the permgen allocated sentinelRef with a self-looped end
  - S7085944: FDS: gdb does not find debug symbols for libjsig link
  - S7086226: UseNUMA fails on old versions of windows
  - S7086261: javac doesn't report error as expected, it only reports ClientCodeWrapper$DiagnosticSourceUnwrapper
  - S7086394: c2/arm: enable UseFPUForSpilling
  - S7086533: G1: assert(!_g1->is_obj_dead(obj)): We should not be preserving dead objs: g1CollectedHeap.cpp:3835
  - S7086560: 7085404 changes broke VM with -XX:-EnableInvokeDynamic
  - S7086585: make Java field injection more flexible
  - S7086589: bump the hs22 build number to 04
  - S7087445: Improve platform independence of JSR292 shared code
  - S7087453: PhaseChaitin::yank_if_dead() should handle MachTemp inputs
  - S7087583: Hotspot fails to allocate heap with mmap(MAP_HUGETLB)
  - S7087717: G1: make the G1PrintRegionLivenessInfo parameter diagnostic
  - S7087947: Add regression test for 7068051
  - S7087956: add libattach.so to embedded JRE to enable additional troubleshooting support
  - S7088020: SEGV in JNIHandleBlock::release_block
  - S7088287: libpng need to be updated.
  - S7088955: add C2 IR support to the SA
  - S7088991: Bump ths hs22 build number to 05
  - S7089625: G1: policy for how many old regions to add to the CSet (when young gen is fixed) is broken
  - S7089632: assert(machtmp->outcnt() == 1) failed: expected for a MachTemp
  - S7089709: type "jushort" not found
  - S7090069: Java launcher hangs in infinite loop on windows when UseNUMA[Interleaving] is specified
  - S7090259: Fix hotspot sources to build with old compilers
  - S7090654: nightly failures after 7086585
  - S7090843: (tz) Support tzdata2011j
  - S7090844: Support a timezone whose offset is changed more than once in the future
  - S7091032: G1: assert failure when NewRatio is used
  - S7091141: JAXP 1.4.5 update 1 for 7u2
  - S7091255: Bump the hs22 build number to 06
  - S7091294: disable quicksort tests
  - S7091369: DatagramSocket/Limit.java failing on 8 and 7u2
  - S7091528: javadoc attempts to parse .class files
  - S7092186: adjust package access in rmiregistry
  - S7092236: java/util/EnumSet/EnumSetBash.java fails
  - S7092238: G1: Uninitialized field gc_efficiency in G1PrintRegionLivenessInfo output
  - S7092245: G1: Wrong format specifier in G1PrintRegionLivenessInfo header output
  - S7092278: "jmap -finalizerinfo" throws "sun.jvm.hotspot.utilities.AssertionFailure: invalid cp index 0 137"
  - S7092412: G1: Some roots not marked during an initial mark that gets an evacuation failure
  - S7092679: (tz) Java getting wrong timezone/DST info on Solaris 11
  - S7093108: Bump the hs22 build number to 07
  - S7095698: jdk7u2 does not work as a bootstrap after 7091141
  - S7096366: PPC: corruption of floating-point values with DeoptimizeALot
  - S7097048: G1: extend the G1 SA changes to print per-heap space information
  - S7097053: G1: assert(da ? referent->is_oop() : referent->is_oop_or_null()) failed: referenceProcessor.cpp:1054
  - S7098719: -Dsun.net.maxDatagramSockets and Socket constructor does not work correctly with System.gc()
  - S7099017: jdk7u2-dev does not build
  - S7099228: Use a PKCS11 config attribute to control encoding of an EC point
  - S7099399: cannot deal with CRL file larger than 16MB
  - S7099488: TwoStacksPlainSocketImpl should invoke super.create(stream), typo in fix for 7098719
  - S7100165: JSR 292: leftover printing code in methodHandleWalk.cpp
  - S7100757: The BitSet.nextSetBit() produces incorrect result in 32bit VM on Sparc
  - S7101102: Bump the hs22 build number to 08
  - S7101658: Backout 7082769 changes
  - S7102337: Third Party License Readme updates for 7u2
  - S7102369: remove java.rmi.server.codebase property parsing from registyimpl
  - S7102515: javac running very very long and not returning
  - S7103108: (tz) Support tzdata2011l
  - S7103224: collision between __LEAF define in interfaceSupport.hpp and /usr/include/sys/cdefs.h with gcc
  - S7103405: Correct display names for Pacific/Apia timezone
  - S7103610: _NET_WM_PID and WM_CLIENT_MACHINE are not set
  - S7104126: Insert openjdk copyright header back into TZdata files
  - S7108550: Bump the hs22 build number to 09
  - S7108598: Pogo Table Games freeze with JDK 7
  - S7110428: Crash during HeapDump operation
  - S7110586: C2 generates incorrect results
  - S7110590: DnDMerlinQLTestsuite_DnDJTextArea test fails with an java.awt.dnd.InvalidDnDOperationException
  - S7112766: Bump the hs22 build number to 10
  - S7140882: Don't return booleans from methods returning pointers
  - Don't force -Werror on in com/sun/java/pack
* JamVM
  - Implement classlibCheckIfOnLoad().
  - Make thread states JVMTI compatible.
  - Add OpenBSD/sparc to list of recognised hosts.
  - Handle 'g' when specifying memory + extra checks.

New in release 2.0 (2011-10-19):

* Security fixes
  - S7000600, CVE-2011-3547: InputStream skip() information leak
  - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor
  - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow
  - S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager
  - S7046794, CVE-2011-3553: JAX-WS stack-traces information leak
  - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine
  - S7055902, CVE-2011-3521: IIOP deserialization code execution
  - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks
  - S7064341, CVE-2011-3389: HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)
  - S7070134, CVE-2011-3558: HotSpot crashes with sigsegv from PorterStemmer
  - S7077466, CVE-2011-3556: RMI DGC server remote code execution
  - S7083012, CVE-2011-3557: RMI registry privileged code execution
  - S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection
* Bug fixes
  - Allow the compiler used to be overridden by setting BUILD_GCC/BUILD_CPP.
  - Fixed regression test runtime/7020373.
  - Convert to optional system library usage via USE_SYSTEM_ZLIB/JPEG/PNG/GIF.
  - PR586: Add missing sources to src.zip.
  - PR717: All non-bootstrap non-conditional patches in IcedTea7 should be in the forest or dropped.
  - PR767: Annotation Processing Filer.getResource() always throws FileNotFoundException
  - PR790: Re-include JAXP and JAXWS in the source tree
  - G356743: Support building against libpng 1.5.
  - S7070134: Hotspot crashes with sigsegv from PorterStemmer
  - S7044738: Loop unroll optimization causes incorrect result
  - S7068051: SIGSEGV in PhaseIdealLoop::build_loop_late_post
  - S7073913: Avoid random segfaults.
  - PR751: IcedTea7 should bootstrap with IcedTea7
* Zero/Shark
  - PR757, S7066143: 7009309 regression: x86 stubRoutines
  - PR753, S7066143: 7009923 regression
  - PR770: Zero 7033954 regression: missing mapfile
  - methodHandles_zero missing.
  - sharkContext typo in assert
  - sharedRuntime needs rework after indy reorg
  - Add missing describe_pd method for Zero.
* CACAO
  - CA149: Used wrong class loader.
  - CA159: Exception handler blocks / register mixup.
  - src/vm/javaobjects.cpp (java_lang_reflect_Method::invoke): [OPENJDK] stack index of caller was off by one, causing many apt (Annotation Processing Tool) failures.
  - Set thread to RUNNABLE during Thread.start.
  - Removed state-setting function call that would be done by the thread itself, creating a nasty race.
* JamVM
  - JamVM is self-hosting.
  - PR772: jtreg LocalOnlyTest sends SIGQUIT to all processes on exit.
  - LP827463: Fix OpenJDK enclosingMethodInfo().
  - Add support for armhf.
  - Skip Java-reflection-related DelegatingClassLoaders, enables JamVM to run NetBeans.
  - Generic JNI stubs for common JNI method signatures.
  - Fix memory heap arguments in terms of gigabytes.
  - armhf: ensure stack is 8 byte aligned.
  - "Fix" handling of CLI bootclasspath options.
  - Fix for StackTraceElement checkin.
  - Fix typo in definition of ACC_MIRANDA.
  - Intern strings when creating a StackTraceElement.
  - Ignore assertions and verify options.
  - Remove empty clobber.
  - Use dots instead of slashes in classname for exception.
  - Correct thrown exception by bootstrap loader.
  - Put parsing of -cp and -classpath options back in.
  - Fix threading of references list during compaction.
  - Further fix to freeClassData for native methods.
  - Fix class GC with classes containing Miranda methods.
  - Propogate initialisation errors to top-level.
  - Make classlib init functions consistent + warnings.
  - Correctly implement sun.misc.Unsafe freeMemory().
  - Move lazy-loading to init function.
  - Fix various warnings with -Wall.
  - PrintThreadsDump needs "self" as argument.
  - CopyMemory, etc. handle negative or truncation in length.
  - Extra sun.misc.Unsafe functions.
  - Ignore options for jtreg tests.
  - Enable shutdownVM to be called with OpenJDK classlib.
  - Initial implementation of JVM_FindClassFromBootLoader.
  - Fix callJNIMethod on i386 with -fomit-frame-pointer.
  - Fix backwards cache conflict resolution code.
  - Unify command line options parsing.
  - Remove debug printf.
  - Fix leak of native thread structure.
  - Consistent naming for classlib functions.
  - Add extra includes to get rid off compiler warning.
  - Rework OpenJDK storage of native thread structure.
  - Implement remaining OpenJDK Array reflection interface.

New in release 1.14 (2011-05-25):

* NetX and the plugin moved to the IcedTea-Web project with a separate
  release cycle.
* Builds using system LCMS by default.
* Added out-of-the-box JamVM support using --enable-jamvm
* Allow building of JamVM beside the default VM by using --with-additional-vms=jamvm
* Allow the location of the JamVM source zip to be specified using --with-jamvm-src-zip
* JamVM builds can bootstrap and are self-hosting.
* Bug fixes
  - PR616, PR99: Don't statically link libstdc++
  - PR640: JamVM fails to build - Unrecognised option: -XX:ThreadStackSize.
  - PR714: Forwardport replace-hotspot support from IcedTea6.
  - PR103: Usage of native2ascii during bootstrap
  - PR543: zero fails to build on icedtea7 trunk 20100907
  - PR715: Port updated macros from IcedTea6 to 7
  - PR732: Use xsltproc for bootstrap xslt in place of Xerces/Xalan
* JamVM
  - Ignore all unknown options.
  - Handle overflow in getPhysicalMemory().
  - Base default min and max heap size on physical memory.
  - Fix reflective array access.
  - Handle O_DELETE in JVM_Open.
  - Minor performance improvement on ARM.
  - First set of changes to support JamVM/OpenJDK on MacOS X.
  - Minor memory leak (missing free).
  - Handle integer overflow on i386/amd64.
  - On ARM, force interpreter to be built in ARM mode.
  - MIPS: 64-bit and interpreter inlining by default.
  - Trivial implementation of stubs for MIPS.
* CACAO
  - Threadlist & threadobject improvements.
  - Ignore all unknown options, but report them.
  - Fixes build for newer gcc (at least 4.4) on PPC64, breaks older gcc.
  - CA123: LD_LIBRARY_PATH and java.library.path.
  - CA143: don't hang with invalid locale.
  - CA144: aligned patchers on x86_64.
  - CA148: support for LCMP bytecode.
  - CA152: Calling Policy.setPolicy with a new Policy object has no effect on the DefaultSecurityManager.
  - CA156: uncaughtExceptionHandler doesn't work with OpenJDK 6 b21.
  - CA157: ARM SMP Assertion thinlock failed.
* Zero/Shark
  - Match Shark in icedtea6, makes OSR work by removing vestigal check.
  - LLVM 2.7 non-product fixes.
  - Correct suffix for the llvm.atomic.cmp.swap intrinsic.

New in release 1.13 (2010-07-29)

* Updated to OpenJDK7 milestone 7/b89.
* Removed VisualVM support; now hosted at http://icedtea.classpath.org/hg/visualvm.
* Removed old plugin.
* Bumped to CACAO 1.1.0 pre-release snapshot.
* libjpeg7 & libpng 1.4 supported.
* Latest security updates and hardening patches:
  - (CVE-2010-0837): JAR "unpack200" must verify input parameters (6902299)
  - (CVE-2010-0845): No ClassCastException for HashAttributeSet constructors if run with -Xcomp (6894807)
  - (CVE-2010-0838): CMM readMabCurveData Buffer Overflow Vulnerability (6899653)
  - (CVE-2010-0082): Loader-constraint table allows arrays instead of only the base-classes (6626217)
  - (CVE-2010-0095): Subclasses of InetAddress may incorrectly interpret network addresses (6893954)
  - (CVE-2010-0085): File TOCTOU deserialization vulnerability (6736390)
  - (CVE-2010-0091): Unsigned applet can retrieve the dragged information before drop action occurs (6887703)
  - (CVE-2010-0088): Inflater/Deflater clone issues (6745393)
  - (CVE-2010-0084): Policy/PolicyFile leak dynamic ProtectionDomains. (6633872)
  - (CVE-2010-0092): AtomicReferenceArray causes SIGSEGV -> SEGV_MAPERR error (6888149)
  - (CVE-2010-0094): Deserialization of RMIConnectionImpl objects should enforce stricter checks (6893947)
  - (CVE-2010-0093): System.arraycopy unable to reference elements beyond Integer.MAX_VALUE bytes (6892265)
  - (CVE-2010-0840): Applet Trusted Methods Chaining Privilege Escalation Vulnerability (6904691)
  - (CVE-2010-0848): AWT Library Invalid Index Vulnerability (6914823)
  - (CVE-2010-0847): ImagingLib arbitrary code execution vulnerability (6914866)
  - (CVE-2009-3555): TLS: MITM attacks via session renegotiation
  - 6639665: ThreadGroup finalizer allows creation of false root ThreadGroups
  - 6898622: ObjectIdentifer.equals is not capable of detecting incorrectly encoded CommonName OIDs
  - 6910590: Application can modify command array in ProcessBuilder
  - 6909597: JPEGImageReader stepX Integer Overflow Vulnerability
  - 6932480: Crash in CompilerThread/Parser. Unloaded array klass?
  - (CVE-2010-2783, RH616895): IcedTea 'Extended JNLP Services' arbitrary file access
  - (CVE-2010-2548, RH616893): IcedTea Incomplete property access check for unsigned applications
* Bug fixes
  - PR179: Rhino bootclasspath issue
  - PR512: Extract jaxws getdtdtype patch to boot tree instead of main tree.
  - PR521: Don't hardlink the copy of generated.
  - S6963870: NPE in CompoundBorder.getInsets()
  - S6967533: Epoch bug: ExceptionInInitializerError on systems with uninitialized clock
  - S6944361: Missing CKR_ values in PKCS11Exception
* SystemTap
  - Added JNI call tracing using systemtap version 1.0+ when
    configuring with --enable-systemtap. See tapset/hotspot_jni.stp.
  - Add support for Zero build on Hitachi SH.
  - Removed the old plugin, replaced by the NPPlugin.
  - PR476: Enable building SystemTap support on GCC 4.5.
  - Fix hotspot tapset object_alloc size variable.
  - Workaround RH613824: Missing and wrong hotspot.* probepoint arguments
* Zero/Shark
  - Formatting changes and other fixes to match upstream
  - PR428: Shark on ARM precompiled header incls
  - Update Shark for LLVM r95390 API change.
  - S6927165: Zero S/390 fixes (from upstream)
  - Implemented Shark host CPU feature autotuner using LLVM 2.7 APIs.
  - Add s390 support to TCK setup helper script
  - Strip stupid options that llvm-config supplies
  - Update Shark for LLVM r94686 API change.
  - S6914622, S6909153, S6913869 upstream Zero fixes.
  - Fixed Shark sharkCompiler mattr memory corruption bug when using llvm 2.7.
  - PR525: Shark made not entrant deopt sigsegv regression after bump to b20 and hs17.
  - PR shark/483: Fix miscompilation of sun.misc.Unsafe::getByte.
  - PR icedtea/324, icedtea/481: Fix Shark VM crash.
  - Update Shark for LLVM 2.8 API change r100304
  - Shark calling static jni methods jclass argument fix.
  - PR484: Shark jit code block "0xcdcdcdcd" zombie wipeout Sigsegv crash
  - Backport new frame anchor and stack overflow code for Zero and Shark
  - Fix stack leak in Shark
  - PR494: Shark fails to catch Exception using catch (Throwable e)
* NPPlugin fixes
  - PR446: Use JDK_UPDATE_VERSION to set the jpi version.
  - Re-designed frame embedding code so that the applet is dynamically
    packed into given handle. This increases stability and breaks
    reliance on the assumption that the browser will always provide a
    handle in a certain sequence.
    - Encode new lines, carriage returns, and other special characters
    before sending them to Java side (de-coding code is already in
    effect on Java side).
    - Centralised and increased timeouts to give slow-loading applets
    enough time to load.
    - Fix security permissions related to get/set property, based on
    specifications.
  - Added support for JSObject.finalize()
  - Liveconnect message processing design changes.
  - Message protocol overhaul to fix race conditions
  - PR166: Create FIFO pies in temp dir instead of ~/.icedteaplugin
  - Profiled memory usage and implemented proper cleanup for C++ side.
  - Update debug output string and function/structure names to
    change 'GCJ' references to ITNP/IcedTea NP Plugin
  - PR461: plugin working for NSS enabled builds with firefox including a private NSS copy
  - Removed unncessary debug and trace output
  - PR474: Patch from Paulo Cesar Pereira de Andrade, incrementing malloc size to account for NULL terminator.
  - RH524387: javax.net.ssl.SSLKeyException: RSA premaster secret error
  - Set context classloader for all threads in an applet's threadgroup
  - PR436: Close all applet threads on exit
  - PR480: NPPlugin with NoScript extension.
  - PR488: Question mark changing into underscore in URL.
  - RH592553: Fix bug causing 100% CPU usage.
  - Don't generate a random pointer from a pthread_t in the debug output.
  - Add ForbiddenTargetException for legacy support.
  - Use variadic macro for plugin debug message printing.
  - Don't link the plugin with libxul libraries.
  - Fix race conditions in plugin initialization code that were causing hangs.
  - RH506730: BankID (Norwegian common online banking authentication system) applet fails to load.
  - PR491: pass java_{code,codebase,archive} parameters to Java.
  - Adds javawebstart.version property and give user permission to read that property.
* NetX:
  - Make path sanitization consistent; use a blacklisting approach.
  - Make the SingleInstanceServer thread a daemon thread.
  - Handle JNLP files which use native libraries but do not indicate it
  - Allow JNLP classloaders to share native libraries
  - Added encoding support
  - Do not use Look and Feel related methods for setting up security dialogs
  - Error out when unsigned jnlp applications request permissions
* PulseAudio:
  - Add missing .c file to PulseAudio build
  - Eliminate spurious exception throwing.

New in release 1.12 (2009-11-17)

- Updated to OpenJDK7 milestone 5; includes:
  - From Project Coin:
    - 6860965: Support for binary literals (e.g. 2 can be written 0b10)
    - 6860965: Support for underscored literals (e.g. 123456 can be
      written 123_456)
    - 6827009: Support for strings in switch statements (e.g. case "a")
    - 6840638: Improved inferencing with generics, e.g.
      Map<String,Integer> map = new HashMap<>();
  - jsr166y from http://gee.cs.oswego.edu/dl/concurrency-interest/:
    - 6865571: Add a lightweight task framework known as ForkJoin
    - 6445158: Phaser - an improved CyclicBarrier
    - 6865579: Add TransferQueue/LinkedTransferQueue
  - The Zero assembler port
  - JIBX is no longer required to build Nimbus.
  - Many bug fixes
- Latest security updates:
  - (CVE-2009-3728) ICC_Profile file existence detection information leak (6631533)
  - (CVE-2009-3885) BMP parsing DoS with UNC ICC links (6632445)
  - (CVE-2009-3881) resurrected classloaders can still have children (6636650) 
  - (CVE-2009-3882) Numerous static security flaws in Swing (findbugs) (6657026)
  - (CVE-2009-3883) Mutable statics in Windows PL&F (findbugs) (6657138)
  - (CVE-2009-3880) UI logging information leakage (6664512)
  - (CVE-2009-3879) GraphicsConfiguration information leak (6822057)
  - (CVE-2009-3884) zoneinfo file existence information leak (6824265)
  - (CVE-2009-2409) deprecate MD2 in SSL cert validation (Kaminsky) (6861062)
  - (CVE-2009-3873) JPEG Image Writer quantization problem (6862968)
  - (CVE-2009-3875) MessageDigest.isEqual introduces timing attack vulnerabilities (6863503)
  - (CVE-2009-3876, CVE-2009-3877) OpenJDK ASN.1/DER input stream parser denial of service (6864911)
  - (CVE-2009-3869) JRE AWT setDifflCM stack overflow (6872357)
  - (CVE-2009-3874) ImageI/O JPEG heap overflow (6874643
  - (CVE-2009-3871) JRE AWT setBytePixels heap overflow (6872358)
- The NSS crypto. provider may be turned on with --enable-nss if
  the NSS libraries and headers are available via pkg-config.
- Makefile reorganisation:
  * icedtea-ecj is now icedtea-boot and patches/ecj is now
    patches/boot.
  * The icedtea-against-icedtea target is now icedtea-stage2.
    The icedtea-against-ecj target is now icedtea-stage1.
  * The Java code for the plugin is now built by the
    liveconnect.stamp and liveconnect-dist.stamp targets
    rather than hijacking the OpenJDK build.
- Upgraded to VisualVM 1.2.1

New in release 1.11 (2009-08-06)

- Updated to OpenJDK7 b66 (Milestone 4), including
  JSR 308: Annotations on Java types.
- Updates/bug fixes for netx, Shark and the web plugin.
- Zero is now provided in the upstream forest rather than in-tree.
- The options
  - --with-openjdk
  - --with-icedtea
  - --with-openjdk-home
  - --with-icedtea-home
  - --with-gcj-jdk
  have been removed.  The JDK is now specified by --with-jdk-home
  and whether or not do a full bootstrap or not is now decided
  by --disable-bootstrap (the default is yes).  This is in preparation
  for making the two stages independent of the JDK used, but some
  artefacts still remain in this release; the supported behaviour
  is still the use of gcj jdk for a full bootstrap and icedtea
  for a quick build.
- Added java method tracing using systemtap version 0.9.9+.
- Added latest security fixes.

New in release 1.10 (2009-05-29)

- Updated to OpenJDK7 b59 build via IcedTea forest.  Now includes
  SCTP and Nimbus Swing look and feel.
- Static trace support through systemtap.
  When given the configure option --enable-systemtap IcedTea will build
  hotspot with the dtrace static markers enabled and install an hotspot
  tapset that can be used to dynamically trace execution of java
  applications at runtime. See the tapset/hotspot.stp file for
  documentation of the various trace points and arguments available.
- Allow building of other virtual machines besides the default VM. Additional
  virtual machines on architectures where hotspot is available are cacao
  and zero (or shark), and cacao, where zero (or shark) is available. It's
  not possible to build cacao as the default VM, and zero as additional VM.
- New options --enable-nimbus and --enable-nimbus-generation.  The default
  is that the first is on but the second is off, so Nimbus is built but
  without needing to generate the files using JIBX (http://jibx.sourceforge.net/).
- VisualVM updated to 1.1.1.
- Many build fixes, notably to make netx/the plugin work.  IcedTea7 now
  avoids the binary plug mechanism in favour of using the same method as
  CORBA, JAXP, JAXWS and langtools to import the plugin/netx code.
- Several web browser plugin and javaws support fixes:
  - Fixed security handling to prevent access denials when there is a site
  specific exception in the policy file
  - Allow extensions (chrome) to run Java code with full permissions
  - Added non-trusted SSL support to WebStart (javaws)
  - Added proxy support
  - Other improvements that were breaking specific sites (tag parser fix,
    nested jar support, etc.)
  - Added JVM Console (used by http://chrispederick.com/work/web-developer/)
  - Experimental new plugin enabled by --enable-npplugin.
  - Original plugin is now enabled by --enable-plugin, not --enable-liveconnect.
- LCMS security fixes.
- Many build improvements.
- Many zero/shark jtreg fixes.
- Other bug fixes.

New in release 1.9 (2009-03-20)

- Security fixes for:
  CVE-2008-5360 - Temporary files have guessable file names.
  CVE-2008-5350 - Allows to list files within the user home directory.
  CVE-2008-5348 - Denial-Of-Service in kerberos authentication.
  CVE-2008-5359 - Buffer overflow in image processing.
  CVE-2008-5351 - UTF-8 decoder accepts non-shortest form sequences.
  CVE-2008-5356 - Font processing vulnerability.
  CVE-2008-5353 - Calendar object deserialization allows privilege escalation.
  CVE-2008-5354 - Privilege escalation in command line applications.
  CVE-2008-5357 - Truetype Font processing vulnerability.
  CVE-2008-5352 - Jar200 Decompression buffer overflow.
  CVE-2008-5358 - Buffer Overflow in GIF image processing.
- Updated to OpenJDK7 b50 build.
- XRender pipeline support: Java2D are noticably faster and running over a 
  remote X connection feels like it is all local. Build by default
  (disable with --disable-xrender). Runtime enabled by running java
  -Dsun.java2d.xrender=True (default is to use the old X renderer for now).
- IcedTeaPlugin now supports HTTPS sites and adds a user prompt for
  untrusted https certificates.
- Use the ALSA 'default' device. Makes Java play nicer with PulseAudio.
- VisualVM integration updated to 1.1.1
- Gervill soft synthesizer integration updated to latest CVS version.
- Integrated jtreg upgraded to 4_0-src-b02-15_oct_2008.
- make check runs much faster now. jtreg -samevm support has been
  integrated into the langtools and jdk subsystems. Please package the
  test/jtreg-summary.log file with your distribution package so end users
  can compare the test results.
- Shark (--enable-shark) now builds on 64 bit platforms, but is a
  pre-alpha technology preview and not recommended for use.
- Better support for bootstrapping with different jar programs
  (supporting -J options).
- If --with-pkgversion isn't given the short mercurial rev node version
  will be used.  Package distributors are encouraged to build packages with
  --with-pkgversion to uniquely identify their distribution version number
  when java -version is run to help distribution specific bug reporting.
- Various freetype font, pisces renderer and awt X window size fixes
  to fix visual anomalies.
- Build fixes for gcc 4.3 and 4.4-pre-release.
- Added support for building against a specific openjdk src dir
  or hg revision (--with-openjdk-src-dir or --with-hg-revision).
- Many other Plugin, Zero, Shark and PulseAudio bug fixes.
- Build clean up.
- Updated to CACAO 0.99.4.

New in release 1.8 (2008-11-20)

  IcedTea is based on the hard work of a lot of people that contributed to
  IcedTea6 and OpenJDK. The following noteworthy changes were added in
  this release:

- Updated to b39 build.
- Support for external projects (closures, caciocavallo, cvmi, bsd, nio2).
  Note that these are based on Mercurial repositories so may require local
  changes for a working build due to noticeable differences between the
  repository and the reference OpenJDK b39 build.  At the time of release,
  NIO2 was buildable out of the box.
- Fixed to use new sound service, Gervill.
- Many Netx fixes and now built by default.
- LiveConnect support replaces gcjwebplugin.
- Implemented JavaScript->Java security.
- PulseAudio integrated (--enable-pulse-java)
- VisualVM tool integrated (--enable-visualvm).
- Added out-of-the-box CACAO support (--with-cacao).
- Added the experimental Shark JIT for Zero.
- Cleaned up crypto support, all algorithms and key sizes are fully
  supported now without any (regional) restrictions. No more need for
  separate crypto policy jars.
- Integration of Mozilla Rhino javascript support for javax.script.
  (See http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=179 when
   you want to enable non-system-installed versions of Rhino).
- Add support for Zero builds on alpha, arm, mips, mipsel, m68k, s390.
- Various build fixes.
- Several bug and security fixes.
- Plugin including LiveConnect support built as default.
- Various bugs fixed: renderer patch, version string updated, 
chinese fonts filename fix for Fedora etc.
- More progress on Shark and Cacao.
- Several plugin bug fixes.
- Several build fixes.

New in release 1.7 (2008-06-02)

  IcedTea is based on the hard work of a lot of people that contributed to
  IcedTea6 and OpenJDK. The following noteworthy changes were added in
  this release:

  - Paul Hohensee published a GNU/Linux hotspot Sparc port and Matthias
   Klose integrated it into IcedTea.
  - Keith Seiths and Andrew Haley made fixes to the awt color package so
   that it now provides the lcms library with PYCC and LINEAR_RGB ICC
   profiles, fixing several applications that did complex color
   transformations.
  - Karl Helgason wrote a midi software synthesizer called Gervill that
   is now integrated in IcedTea so that javax.sound.midi support works
   now. Mark Wielaard integrated it and made some fixes so that it works
   better with javax.sound.sampled.
  - Jonathan Gibbons released a free version of jtreg, which was imported
   into IcedTea by Mark Wielaard so that a make check now runs all the
   functional unit tests integrated into OpenJDK.
  - Joshua Sumali made lots of fixes to the javaws/netx support. Including
   improved security, namely catching Socket permissions during runtime,
   implementing the remaining JNLP services api (PrintService and
   JNLPRandomAccessFile), and applet focusing bug fixes, so now netx
   plays nice with gcjwebplugin.
  - Kelly O'Hair resolved the license issues with the (j)hat tool which is
   now integrated.
  - Lillian Angel and Tom Fitzsimmons added several .desktop files for
   the various tools included for better GNU/Linux desktop integration.
  - Thomas Fitzsimmons rewrote the cacert support to resolve issues with
   applications like Glashfish and Eclipse which access the keystore
   directly.
  - Lillian Angel made lots of bug fixes to the packaging and integration
   support, include improving the font support.
  - IcedTea6 1.2 and IcedTea[7] 1.7 are completely synced up again thanks
   to Andrew John Hughes.
  - Andrew also did all the work to make sure IcedTea[7] is now based on
   OpenJDK7 b26 as released by Xiomara Jayasena.
  - Thomas Fitzsimmons rewrote the certificate keystore support.
  - Christian Thalinger made various cacao integration fixes.

New in release 1.6 (2008-02-13)

- Zero-assembler implemented.
- Netx support added. Still a work-in-progress.
- Updated to build with gcc 4.3.
- Many bug fixes.

New in release 1.5 (2008-01-03)

- ppc/ppc64 support.
- ecj bootstrapping re-implemented.
- Updated to OpenJDK b24 build (now uses mercurial).
- System libraries (libpng, libjpeg, zlib, giflib) are used 
instead of OpenJDK's implementations.
- Several bug fixes.

New in release 1.4 (2007-10-12)

* Updated to OpenJDK b21 build (README and INSTALL updated accordingly).
* Now using SSL/Crypto support included in b21, OpenSSL certs
still read directly.
* TZdata fix: uses System's timezone data.
* Memory issue fix: maximum PermGen space set to 128M and MaxHeap
to 512M.
* Xinerama fix: uses system installed library instead.
* DebugInfo fix: generates full debuginfo, regardless of
optimization.
* Fixed JConsole crash.
* Several other bug fixes.

New in release 1.3 (2007-08-29)

* Updated to OpenJDK b18 build.
* Web browser plugin support using gcjwebplugin.
* Now using Font supported included in b18.
* Graphics fixes.
* SSL/Crypto fixes.
* Refactored build process.

New in release 1.2 (2007-08-01)

* Updated to OpenJDK b16 build.
* Freetype font support fully replacing the encumbered libt2k.
* Path widening imported from GNU Classpath.
* Window decorations on x86_64 fixed.
* Bug fixes in various graphics classes.
* Anti-aliasing support explicitly disabled (instead of crashing).
* OpenSSL certs read directly
* Various crypto bug fixes.

New in release 1.1 (2007-07-12)

* Color management and raster fixes for compatibility with LittleCMS.
* Debuginfo is always generated.
* Initial work to satisfy libt2k requirement with Freetype.
* The GNU Crypto security providers have been imported from GNU
  Classpath.
* IcedTls security provider.