openjdk team mailing list archive

["Damien Raude-Morvan" <drazzib@xxxxxxxxxx>]

tag 503932 + moreinfo
thanks

Hi,

There was some proxy fixes in 6b14 / Icedtea 1.4.1.
Could you please test it ?
[I've no proxy at hande to reproduce]

openjdk-6 (6b14-1.4.1-0ubuntu5) jaunty; urgency=low

  [Matthias Klose]
  * Update to the final CACAO 0.99.4 release.
  * Security Vulnerability Fixes for OpenJDK:
    - 6522586: Enforce limits on Font creation.
    - 6536193: flaw in UTF8XmlOutput.
    - 6610888: Potential use of cleared of incorrect acc in JMX Monitor.
    - 6610896: JMX Monitor handles thread groups incorrectly.
    - 6630639: lightweight HttpServer leaks file descriptors on no-data
      connections.
    - 6632886: Font.createFont can be persuaded to leak temporary files.
    - 6636360: compiler/6595044/Main.java test fails with 64bit java on
      solaris-sparcv9 with SIGSEGV.
    - 6652463: MediaSize constructors allow to redefine the mapping of
      standard MediaSizeName values.
    - 6652929: Font.createFont(int,File) trusts File.getPath.
    - 6656633: getNotificationInfo methods static mutable (findbugs).
    - 6658158: Mutable statics in SAAJ (findbugs).
    - 6658163: txw2.DatatypeWriter.BUILDIN is a mutable static (findbugs).
    - 6691246: Thread context class loader can be set using JMX remote
      ClientNotifForwarded.
    - 6717680: LdapCtx does not close the connection if initialization fails.
    - 6721651: Security problem with out-of-the-box management.
    - 6737315: LDAP serialized data vulnerability.
    - 6792554: Java JAR Pack200 header checks are insufficent.
    - 6804996: JWS PNG Decoding Integer Overflow [V-flrhat2ln8].
    - 6804997: JWS GIF Decoding Heap Corruption [V-r687oxuocp].
    - 6804998: JRE GIF Decoding Heap Corruption [V-y6g5jlm8e1].
  * Add security patch for the lcms library.
  * Add accessibility patches java-access-bridge-security.patch and
    accessible-toolkit.patch.
  * Merge fixes for testsuite failures from the IcedTea6 branch.
  * Merge the proxy support for the plugin  from the IcedTea6 branch.
  * Merge 
http://icedtea.classpath.org/hg/release/icedtea6-1.4.1/rev/546ef0cdee06
    (TJ). LP: #344705.
  * Add a Xb-Npp-Description for the IcedTea plugin. LP: #272010.

  [Edward Nevill]
  * Put VFP back in - selects VFP / novfp autmatically
  * More assembler optimisations

 -- Matthias Klose <doko@xxxxxxxxxx>  Thu, 09 Apr 2009 14:14:12 +0200


Cheers,
-- 
Damien - Debian Developper
http://wiki.debian.org/DamienRaudeMorvan

Attachment: signature.asc
Description: This is a digitally signed message part.