Mercurial > hg > release > icedtea7-2.3

changeset 2635:4ac09fcb8411

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
List security fixes in NEWS. 2013-02-20 Andrew John Hughes <gnu.andrew@member.fsf.org> * NEWS: List security fixes.
author Andrew John Hughes <gnu_andrew@member.fsf.org>
date Wed, 20 Feb 2013 13:27:49 +1100
parents 3163f2f2b666
children 8e87a16a613c
files ChangeLog Makefile.am NEWS
diffstat 3 files changed, 17 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/ChangeLog	Wed Feb 20 02:20:47 2013 +0000
+++ b/ChangeLog	Wed Feb 20 13:27:49 2013 +1100
@@ -1,3 +1,7 @@
+2013-02-20  Andrew John Hughes  <gnu.andrew@member.fsf.org>
+
+	* NEWS: List security fixes.
+
 2013-02-20  Andrew John Hughes  <gnu.andrew@member.fsf.org>
 
 	* Makefile.am,
--- a/Makefile.am	Wed Feb 20 02:20:47 2013 +0000
+++ b/Makefile.am	Wed Feb 20 13:27:49 2013 +1100
@@ -1,7 +1,7 @@
 # Dependencies
 
 OPENJDK_VERSION = b20
-JDK_UPDATE_VERSION = 13
+JDK_UPDATE_VERSION = 15
 COMBINED_VERSION = $(JDK_UPDATE_VERSION)-$(OPENJDK_VERSION)
 
 CORBA_CHANGESET = 82e58144c3fb
--- a/NEWS	Wed Feb 20 02:20:47 2013 +0000
+++ b/NEWS	Wed Feb 20 13:27:49 2013 +1100
@@ -12,6 +12,18 @@
 
 New in release 2.3.7 (2013-02-XX):
 
+* Security fixes
+  - S8004937, CVE-2013-1484: Improve proxy construction
+  - S8006439, CVE-2013-1485: Improve MethodHandles coverage
+  - S8006446, CVE-2013-1486: Restrict MBeanServer access
+  - S8006777, CVE-2013-0169: Improve TLS handling of invalid messages
+  - S8007688: Blacklist known bad certificate
+* Backports
+  - S8007393: Possible race condition after JDK-6664509
+  - S8007611: logging behavior in applet changed
+* Bug fixes
+  - PR1303: Support building with giflib 5
+
 New in release 2.3.6 (2013-02-12):
 
 * Security fixes