Mercurial > hg > release > icedtea7-2.3

changeset 2597:f8630130b123

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
List 2.3.2 forest changes in NEWS. 2012-08-31 Andrew John Hughes <gnu_andrew@member.fsf.org> * NEWS: Add 2.3.2 changes from the forest. Add Sun bug ID to previous security fix in 2.3.1.
author Andrew John Hughes <gnu_andrew@member.fsf.org>
date Fri, 31 Aug 2012 13:17:58 +0100
parents 4aeec93c841f
children b528556c4c43
files ChangeLog NEWS
diffstat 2 files changed, 18 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/ChangeLog	Fri Aug 31 13:12:41 2012 +0100
+++ b/ChangeLog	Fri Aug 31 13:17:58 2012 +0100
@@ -1,3 +1,9 @@
+2012-08-31  Andrew John Hughes  <gnu_andrew@member.fsf.org>
+
+	* NEWS: Add 2.3.2 changes from the forest.
+	Add Sun bug ID to previous security fix in
+	2.3.1.
+
 2012-08-31  Andrew John Hughes  <gnu_andrew@member.fsf.org>
 
 	(JDK_CHANGESET): Update to IcedTea7 2.3 forest head
--- a/NEWS	Fri Aug 31 13:12:41 2012 +0100
+++ b/NEWS	Fri Aug 31 13:17:58 2012 +0100
@@ -12,10 +12,21 @@
 
 New in release 2.3.2 (2012-10-16):
 
+* Security fixes
+  - S7162476, CVE-2012-1682: XMLDecoder security issue via ClassFinder
+  - S7194567, CVE-2012-3136: Improve long term persistence of java.beans objects
+  - S7163201, CVE-2012-0547: Simplify toolkit internals references
+* OpenJDK
+  - Fix Zero FTBFS issues with 2.3
+  - S7180036: Build failure in Mac platform caused by fix # 7163201
+  - S7182135: Impossible to use some editors directly
+  - S7183701: [TEST] closed/java/beans/security/TestClassFinder.java - compilation failed
+  - S7185678: java/awt/Menu/NullMenuLabelTest/NullMenuLabelTest.java failed with NPE
+
 New in release 2.3.1 (2012-08-29):
 
 * Security fixes
-  - RH852051, CVE-2012-4681: Reintroduce PackageAccessible checks removed in 6788531.
+  - RH852051, CVE-2012-4681, S7162473: Reintroduce PackageAccessible checks removed in 6788531.
 * Bug fixes
   - PR902: PulseAudioClip getMicrosecondsLength() returns length in milliseconds, not microseconds
   - PR986: IcedTea7 fails to build with IcedTea6 CACAO due to low max heap size