changeset 2546:88cc265f0504

List 2.1.6 changes in NEWS. 2013-02-20 Andrew John Hughes <gnu.andrew@member.fsf.org> * NEWS: List security fixes.
author Andrew John Hughes <gnu_andrew@member.fsf.org>
date Wed, 20 Feb 2013 17:16:09 +1100
parents 421a34013779
children 05bc6e6f7d9c
files ChangeLog NEWS
diffstat 2 files changed, 17 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/ChangeLog	Wed Feb 20 06:14:09 2013 +0000
+++ b/ChangeLog	Wed Feb 20 17:16:09 2013 +1100
@@ -1,3 +1,7 @@
+2013-02-20  Andrew John Hughes  <gnu.andrew@member.fsf.org>
+
+	* NEWS: List security fixes.
+
 2013-02-20  Andrew John Hughes  <gnu.andrew@member.fsf.org>
 
 	* Makefile.am,
--- a/NEWS	Wed Feb 20 06:14:09 2013 +0000
+++ b/NEWS	Wed Feb 20 17:16:09 2013 +1100
@@ -12,6 +12,19 @@
 
 New in release 2.1.6 (2013-02-XX):
 
+* Security fixes
+  - S8004937, CVE-2013-1484: Improve proxy construction
+  - S8006439, CVE-2013-1485: Improve MethodHandles coverage
+  - S8006446, CVE-2013-1486: Restrict MBeanServer access
+  - S8006777, CVE-2013-0169: Improve TLS handling of invalid messages
+  - S8007688: Blacklist known bad certificate
+* Backports
+  - S7123519: problems with certification path
+  - S8007393: Possible race condition after JDK-6664509
+  - S8007611: logging behavior in applet changed
+* Bug fixes
+  - PR1303: Support building with giflib 5
+
 New in release 2.1.5 (2013-02-13):
 
 * Security fixes