Mercurial > hg > release > icedtea7-2.4

changeset 2690:b4ec791c20d1

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Bring in u51 changes Update to forest tag for 2.4.4, which should contain all the u51 changes.
author Omair Majid <omajid@redhat.com>
date Tue, 14 Jan 2014 18:46:21 -0500
parents 6c64497ab921
children 73ef620ce0a5
files ChangeLog Makefile.am NEWS hotspot.map
diffstat 4 files changed, 71 insertions(+), 15 deletions(-) [+]
line wrap: on
line diff
--- a/ChangeLog	Wed Dec 18 00:32:15 2013 +0000
+++ b/ChangeLog	Tue Jan 14 18:46:21 2014 -0500
@@ -1,3 +1,21 @@
+2014-01-14  Omair Majid  <omajid@redhat.com>
+
+	* Makefile.am:
+	(CORBA_CHANGESET): Update to IcedTea 2.4.4 tag.
+	(JAXP_CHANGESET): Likewise.
+	(JAXWS_CHANGESET): Likewise.
+	(JDK_CHANGESET): Likewise.
+	(LANGTOOLS_CHANGESET): Likewise.
+	(OPENJDK_CHANGESET): Likewise.
+	(CORBA_SHA256SUM): Likewise.
+	(JAXP_SHA256SUM): Likewise.
+	(JAXWS_SHA256SUM): Likewise.
+	(JDK_SHA256SUM): Likewise.
+	(LANGTOOLS_SHA256SUM): Likewise.
+	(OPENJDK_SHA256SUM): Likewise.
+	* hotspot.map: Update to IcedTea 2.4.4 tag.
+	* NEWS: Update with fixes.
+
 2013-12-17  Andrew John Hughes  <gnu.andrew@redhat.com>
 
 	* Makefile.am:
--- a/Makefile.am	Wed Dec 18 00:32:15 2013 +0000
+++ b/Makefile.am	Tue Jan 14 18:46:21 2014 -0500
@@ -1,22 +1,22 @@
 # Dependencies
 
-JDK_UPDATE_VERSION = 45
-BUILD_VERSION = b31
+JDK_UPDATE_VERSION = 51
+BUILD_VERSION = b00
 COMBINED_VERSION = $(JDK_UPDATE_VERSION)-$(BUILD_VERSION)
 
-CORBA_CHANGESET = 2b24b81f4555
-JAXP_CHANGESET = 582213f5560e
-JAXWS_CHANGESET = 0cb5423008ad
-JDK_CHANGESET = 18ee4113fc37
-LANGTOOLS_CHANGESET = 5216dd4602fe
-OPENJDK_CHANGESET = 63b832c8ec92
+CORBA_CHANGESET = e540fd592221
+JAXP_CHANGESET = 2e2bf2d8be16
+JAXWS_CHANGESET = 5aceb5a787b1
+JDK_CHANGESET = 1fe539ed00bc
+LANGTOOLS_CHANGESET = 3f5408abf14b
+OPENJDK_CHANGESET = 796d1bf47b24
 
-CORBA_SHA256SUM = 7f2781cdb311930af63a1ee65e14d4612c3680ceb2d6815feee56d0880fe3db5
-JAXP_SHA256SUM = a41cbcb3abd0485fda80b96347d28af6461cdd5e7c3d51340ccbdb10360ad852
-JAXWS_SHA256SUM = efa5af8f64148b0d323b487d612069463b5300148751c4f1872c4f23a093dce6
-JDK_SHA256SUM = 7f5bbdcc31e85366489969b1a5cd37946c45c896013a34f4d576bdc8a5b3a19c
-LANGTOOLS_SHA256SUM = c9846a716f9c23d970409af32d160297a9c8258dbc91d005cc05d6aab2465be1
-OPENJDK_SHA256SUM = 42fe9ff83e3b6a9b8e2ce2812e05eb8be52a6a3ff2972e93e7621617d530063e
+CORBA_SHA256SUM = 77c3285f6abdefe7f19fc4c698ef1f4fe533f38941314e7e7077c34fa5eb4456
+JAXP_SHA256SUM = 48bb8ece00ef62c6c0161dd90e5789419594dfb5d08163781dac9ffc00c0a3f8
+JAXWS_SHA256SUM = ee2a7165b78693c3bb61a90128b60934704e9a5c6c7514abfbb61e41531b9919
+JDK_SHA256SUM = 16373b85dc5123cfe1816ec04f7d14e9a048c6eee7eb7c22b5b816fa1fd5e9bc
+LANGTOOLS_SHA256SUM = 4375ccfacc49793dd0f13cb73ce3c684218bce71008fc237f3b6da754f4dfea6
+OPENJDK_SHA256SUM = abe048022f46f4d04130b2cf6a1b1d897bdca981518349d34fe5b415310f7782
 
 CACAO_VERSION = e215e36be9fc
 CACAO_SHA256SUM = 4966514c72ee7ed108b882d9b6e65c3adf8a8f9c2dccb029f971b3c8cb4870ab
--- a/NEWS	Wed Dec 18 00:32:15 2013 +0000
+++ b/NEWS	Tue Jan 14 18:46:21 2014 -0500
@@ -14,8 +14,46 @@
 
 New in release 2.4.4 (2014-XX-XX):
 
+* Security fixes
+  - S6727821: Enhance JAAS Configuration
+  - S7068126, CVE-2014-0373: Enhance SNMP statuses
+  - S8010935: Better XML handling
+  - S8011786, CVE-2014-0368: Better applet networking
+  - S8021257, S8025022, CVE-2013-5896 : com.sun.corba.se.** should be on restricted package list
+  - S8021271, S8021266, CVE-2014-0408: Better buffering in ObjC code
+  - S8022904: Enhance JDBC Parsers
+  - S8022927: Input validation for byte/endian conversions
+  - S8022935: Enhance Apache resolver classes
+  - S8022945: Enhance JNDI implementation classes
+  - S8023057: Enhance start up image display
+  - S8023069, CVE-2014-0411: Enhance TLS connections
+  - S8023245, CVE-2014-0423: Enhance Beans decoding
+  - S8023301: Enhance generic classes
+  - S8023338: Update jarsigner to encourage timestamping
+  - S8023672: Enhance jar file validation
+  - S8024302: Clarify jar verifications
+  - S8024306, CVE-2014-0416: Enhance Subject consistency
+  - S8024530: Enhance font process resilience
+  - S8024867: Enhance logging start up
+  - S8025014: Enhance Security Policy
+  - S8025018, CVE-2014-0376: Enhance JAX-P set up
+  - S8025026, CVE-2013-5878: Enhance canonicalization
+  - S8025034, CVE-2013-5907: Improve layout lookups
+  - S8025448: Enhance listening events
+  - S8025758, CVE-2014-0422: Enhance Naming management
+  - S8025767, CVE-2014-0428: Enhance IIOP Streams
+  - S8026172: Enhance UI Management
+  - S8026176: Enhance document printing
+  - S8026193, CVE-2013-5884: Enhance CORBA stub factories
+  - S8026204: Enhance auth login contexts
+  - S8026417, CVE-2013-5910: Enhance XML canonicalization
+  - S8026502: java/lang/invoke/MethodHandleConstants.java fails on all platforms
+  - S8027201, CVE-2014-0376: Enhance JAX-P set up
+  - S8029507, CVE-2013-5893: Enhance JVM method processing
+  - S8029533: REGRESSION: closed/java/lang/invoke/8008140/Test8008140.java fails agains
 * Backports
   - S8025255: (tz) Support tzdata2013g
+  - S8026826: JDK 7 fix for 8010935 broke the build
 * Bug fixes
   - PR1618: Include defs.make in vm.make so VM_LITTLE_ENDIAN is defined on Zero builds
   - D729448: 32-bit alignment on mips and mipsel
--- a/hotspot.map	Wed Dec 18 00:32:15 2013 +0000
+++ b/hotspot.map	Tue Jan 14 18:46:21 2014 -0500
@@ -1,2 +1,2 @@
 # version url changeset sha256sum
-default http://icedtea.classpath.org/hg/release/icedtea7-forest-2.4/hotspot 3ba10e4780e0 debec9fafdd3c1787ccc7ad2090ff242731e36f061fa23911ccd18fc3f4fa73f
+default http://icedtea.classpath.org/hg/release/icedtea7-forest-2.4/hotspot a8a33cc2dd4b cb5f109ae32c07301bc3a017c334ca3a7723124ff217d46127a16ade516d2902