Changelog for
java-1_7_0-openjdk-1.7.0.6-8.8.1.i586.rpm :
* Thu Mar 14 2013 mvyskocilAATTsuse.com- update to icedtea-2.3.7 (bnc#809386)
* Security fixes - S8007014, CVE-2013-0809: Improve image handling - S8007675, CVE-2013-1493: Improve color conversion
* Backports - S8002344: Krb5LoginModule config class does not return proper KDC list from DNS - S8004344: Fix a crash in ToolkitErrorHandler() in XlibWrapper.c - S8006179: JSR292 MethodHandles lookup with interface using findVirtual() - S8006882: Proxy generated classes in sun.proxy package breaks JMockit
* Bug fixes - PR1303: Correct #ifdef to #if - PR1340: Simplify the rhino class rewriter to avoid use of concurrency - Revert 7017193 and add the missing free call, until a better fix is ready.
* made awt crasher patch deprecated
* Fri Mar 01 2013 schwabAATTlinux-m68k.org- Define bits to %__isa_bits if defined
* Thu Feb 21 2013 mvyskocilAATTsuse.com- update to icedtea-2.3.7 (bnc#803379) - S8004937, CVE-2013-1484: Improve proxy construction - S8006439, CVE-2013-1485: Improve MethodHandles coverage - S8006446, CVE-2013-1486: Restrict MBeanServer access - S8006777, CVE-2013-0169: Improve TLS handling of invalid messages - S8007688: Blacklist known bad certificate
* Backports - S8007393: Possible race condition after JDK-6664509 - S8007611: logging behavior in applet changed
* Bug fixes - PR1303: Support building with giflib 5
* Wed Feb 13 2013 mvyskocilAATTsuse.com- update to icedtea-2.3.6 (bnc#803379)
* Security fixes - S6563318, CVE-2013-0424: RMI data sanitization - S6664509, CVE-2013-0425: Add logging context - S6664528, CVE-2013-0426: Find log level matching its name or value given at construction time - S6776941: CVE-2013-0427: Improve thread pool shutdown - S7141694, CVE-2013-0429: Improving CORBA internals - S7173145: Improve in-memory representation of splashscreens - S7186945: Unpack200 improvement - S7186946: Refine unpacker resource usage - S7186948: Improve Swing data validation - S7186952, CVE-2013-0432: Improve clipboard access - S7186954: Improve connection performance - S7186957: Improve Pack200 data validation - S7192392, CVE-2013-0443: Better validation of client keys - S7192393, CVE-2013-0440: Better Checking of order of TLS Messages - S7192977, CVE-2013-0442: Issue in toolkit thread - S7197546, CVE-2013-0428: (proxy) Reflect about creating reflective proxies - S7200491: Tighten up JTable layout code - S7200493, CVE-2013-0444: Improve cache handling - S7200499: Better data validation for options - S7200500: Launcher better input validation - S7201064: Better dialogue checking - S7201066, CVE-2013-0441: Change modifiers on unused fields - S7201068, CVE-2013-0435: Better handling of UI elements - S7201070: Serialization to conform to protocol - S7201071, CVE-2013-0433: InetSocketAddress serialization issue - S8000210: Improve JarFile code quality - S8000537, CVE-2013-0450: Contextualize RequiredModelMBean class - S8000539, CVE-2013-0431: Introspect JMX data handling - S8000540, CVE-2013-1475: Improve IIOP type reuse management - S8000631, CVE-2013-1476: Restrict access to class constructor - S8001235, CVE-2013-0434: Improve JAXP HTTP handling - S8001242: Improve RMI HTTP conformance - S8001307: Modify ACC_SUPER behavior - S8001972, CVE-2013-1478: Improve image processing - S8002325, CVE-2013-1480: Improve management of images
* Backports - S7057320: test/java/util/concurrent/Executors/AutoShutdown.java failing intermittently - S7083664: TEST_BUG: test hard code of using c:/temp but this dir might not exist - S7107613: scalability blocker in javax.crypto.CryptoPermissions - S7107616: scalability blocker in javax.crypto.JceSecurityManager - S7146424: Wildcard expansion for single entry classpath - S7160609: [macosx] JDK crash in libjvm.dylib ( C [GeForceGLDriver+0x675a] gldAttachDrawable+0x941) - S7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar - S7162488: VM not printing unknown -XX options - S7169395: Exception throws due to the changes in JDK 7 object tranversal and break backward compatibility - S7175616: Port fix for TimeZone from JDK 8 to JDK 7 - S7176485: (bf) Allow temporary buffer cache to grow to IOV_MAX - S7179908: Fork hs23.3 hsx from hs22.2 for jdk7u7 and reinitialize build number - S7184326: TEST_BUG: java/awt/Frame/7024749/bug7024749.java has a typo - S7185245: Licensee source bundle tries to compile JFR - S7185471: Avoid key expansion when AES cipher is re-init w/ the same key - S7186371: [macosx] Main menu shortcuts not displayed (7u6 regression) - S7187834: [macosx] Usage of private API in macosx 2d implementation causes Apple Store rejection - S7188114: (launcher) need an alternate command line parser for Windows - S7189136: Fork hs23.5 hsx from hs23.4 for jdk7u9 and reinitialize build number - S7189350: Fix failed for CR 7162144 - S7190550: REGRESSION: Some closed/com/oracle/jfr/api tests fail to compile becuse of fix 7185245 - S7193219: JComboBox serialization fails in JDK 1.7 - S7193977: REGRESSION:Java 7\'s JavaBeans persistence ignoring the \"transient\" flag on properties - S7195106: REGRESSION : There is no way to get Icon inf, once Softreference is released - S7195301: XML Signature DOM implementation should not use instanceof to determine type of Node - S7195931: UnsatisfiedLinkError on PKCS11.C_GetOperationState while using NSS from jre7u6+ - S7197071: Makefiles for various security providers aren\'t including the default manifest. - S7197652: Impossible to run any signed JNLP applications or applets, OCSP off by default - S7198146: Another new regression test does not compile on windows-amd64 - S7198570: (tz) Support tzdata2012f - S7198640: new hotspot build - hs23.6-b04 - S7199488: [TEST] runtime/7158800/InternTest.java failed due to false-positive on PID match. - S7199645: Increment build # of hs23.5 to b02 - S7199669: Update tags in .hgtags file for CPU release rename - S7200720: crash in net.dll during NTLM authentication - S7200742: (se) Selector.select does not block when starting Coherence (sol11u1) - S7200762: [macosx] Stuck in sun.java2d.opengl.CGLGraphicsConfig.getMaxTextureSize(Native Method) - S8000285: Deadlock between PostEventQueue.noEvents, EventQueue.isDispatchThread and SwingUtilities.invokeLater - S8000286: [macosx] Views keep scrolling back to the drag position after DnD - S8000297: REGRESSION: closed/java/awt/EventQueue/PostEventOrderingTest.java fails - S8000307: Jre7cert: focusgained does not get called for all focus req when do alt + tab - S8000822: Fork hs23.7 hsx from hs23.6 for jdk7u11 and reinitialize build number - S8001124: jdk7u ProblemList.txt updates (10/2012) - S8001242: Improve RMI HTTP conformance - S8001808: Create a test for 8000327 - S8001876: Create regtest for 8000283 - S8002068: Build broken: corba code changes unable to use new JDK 7 classes - S8002091: tools/launcher/ToolsOpts.java test started to fail since 7u11 b01 on Windows - S8002114: fix failed for JDK-7160951: [macosx] ActionListener called twice for JMenuItem using ScreenMenuBar - S8002225: (tz) Support tzdata2012i - S8003402: (dc) test/java/nio/channels/DatagramChannel/SendToUnresovled.java failing after 7u11 cleanup issues - S8003403: Test ShortRSAKeyWithinTLS and ClientJSSEServerJSSE failing after 7u11 cleanup - S8003948: NTLM/Negotiate authentication problem - S8004175: Restricted packages added in java.security are missing in java.security-{macosx, solaris, windows} - S8004302: javax/xml/soap/Test7013971.java fails since jdk6u39b01 - S8004341: Two JCK tests fails with 7u11 b06 - S8005615: Java Logger fails to load tomcat logger implementation (JULI)
* Bug fixes - Fix build using Zero\'s HotSpot so all patches apply again. - PR1295: jamvm parallel unpack failure
* removed icedtea-2.3.2-fix-extract-jamvm-dependency.patch - removed icedtea-2.3.3-refresh-6924259-string_offset.patch
* Mon Jan 21 2013 adrianAATTsuse.de- few missing /openjdk/%{origin}/ changes
* Wed Jan 16 2013 mvyskocilAATTsuse.com- update to icedtea-2.3.4 (bnc#798324, bnc#798521)
* Security fixes - S8004933, CVE-2012-3174: Improve MethodHandle interaction with libraries - S8006017, CVE-2013-0422: Improve lookup resolutions - S8006125: Update MethodHandles library interactions
* Bug fixes - S7197906: BlockOffsetArray::power_to_cards_back() needs to handle > 32 bit shifts - G422525: Fix building with PaX enabled kernels.- use gpg-offline to check the validity of icedtea tarball
* Tue Dec 18 2012 adrianAATTsuse.de- use jamvm on %arm- use icedtea package name instead of protected openjdk for jamvm builds- fix armv5 build
* Tue Dec 18 2012 mvyskocilAATTsuse.com- update to java access bridge 1.26.2
* bugfix release, mainly 64bit JNI and JVM support
* Mon Dec 17 2012 mvyskocilAATTsuse.com- fix a segfault in AWT code - (bnc#792951)
* add openjdk-7-src-b147-awt-crasher.patch- turn pulseaudio off on pre 11.4 distros
* Fri Oct 19 2012 mvyskocilAATTsuse.com- update to icedtea-2.3.3 (bnc#785814)
* Security fixes - S6631398, CVE-2012-3216: FilePermission improved path checking - S7093490: adjust package access in rmiregistry - S7143535, CVE-2012-5068: ScriptEngine corrected permissions - S7158796, CVE-2012-5070: Tighten properties checking in EnvHelp - S7158807: Revise stack management with volatile call sites - S7163198, CVE-2012-5076: Tightened package accessibility - S7167656, CVE-2012-5077: Multiple Seeders are being created - S7169884, CVE-2012-5073: LogManager checks do not work correctly for sub-types - S7169887, CVE-2012-5074: Tightened package accessibility - S7169888, CVE-2012-5075: Narrowing resource definitions in JMX RMI connector - S7172522, CVE-2012-5072: Improve DomainCombiner checking - S7186286, CVE-2012-5081: TLS implementation to better adhere to RFC - S7189103, CVE-2012-5069: Executors needs to maintain state - S7189490: More improvements to DomainCombiner checking - S7189567, CVE-2012-5085: java net obselete protocol - S7192975, CVE-2012-5071: Issue with JMX reflection - S7195194, CVE-2012-5084: Better data validation for Swing - S7195549, CVE-2012-5087: Better bean object persistence - S7195917, CVE-2012-5086: XMLDecoder parsing at close-time should be improved - S7195919, CVE-2012-5079: (sl) ServiceLoader can throw CCE without needing to create instance - S7196190, CVE-2012-5088: Improve method of handling MethodHandles - S7198296, CVE-2012-5089: Refactor classloader usage - S7158800: Improve storage of symbol tables - S7158801: Improve VM CompileOnly option - S7158804: Improve config file parsing - S7198606, CVE-2012-4416: Improve VM optimization
* Bug fixes - Remove merge artefact. - Remove the Xp header and library checks.
* JamVM - PR1155: Do not put version number in libjvm.so SONAME- refresh java-1.7.0-openjdk-java-access-bridge-security.patch as new glassfish classes were added- add icedtea-2.3.3-refresh-6924259-string_offset.patch
* Mon Oct 08 2012 mvyskocilAATTsuse.com- %posttrans java-cacerts and cacerts are now recreated if missing, are not properly linked and does not contain/point to file with correct mime-type application/x-java-keystore
* fixes bnc#781690: NoSuchAlgorithmException: SunJSSE
* fixes bnc#727223 - Exceptions during certificate import
* Tue Sep 18 2012 mvyskocilAATTsuse.com- add the optional jamvm support
* running build --with jamvm enables it- add an initial support for build of older releases
* make some buildrequires dependant on suse_version
* workaround older zlib w/o pkgconfig
* fix cacerts installation on pre-11.3
* Tue Sep 11 2012 dmuellerAATTsuse.com- fix two further \"uninitialized return\" warnings for zero builds
* Thu Sep 06 2012 dmuellerAATTsuse.com- update directory ownership for i586
* Tue Sep 04 2012 dmuellerAATTsuse.com- add Sources as full links, so that they can be verified- replace no-return-on-nonvoid patch with a more robust version that annotates the nonreturning functions to avoid spurious warnings that fail the build- fix build on ARM and i586- remove files that are no longer used
* Tue Sep 04 2012 mvyskocilAATTsuse.cz- zero build can be enabled using rpmbuild (osc build) --with zero- add hotspot 2.1 needed for zero- fix filelist on %{ix86}
* Mon Sep 03 2012 mvyskocilAATTsuse.cz- update to icedtea-2.3.2 / OpenJDK7 u6 (bnc#777499)
* Security fixes - S7162476, CVE-2012-1682: XMLDecoder security issue via ClassFinder - S7194567, CVE-2012-3136: Improve long term persistence of java.beans objects - S7163201, CVE-2012-0547: Simplify toolkit internals references - RH852051, CVE-2012-4681, S7162473: Reintroduce PackageAccessible checks removed in 6788531.
* OpenJDK - Fix Zero FTBFS issues with 2.3 - S7180036: Build failure in Mac platform caused by fix # 7163201 - S7182135: Impossible to use some editors directly - S7183701: [TEST] closed/java/beans/security/TestClassFinder.java – compilation failed - S7185678: java/awt/Menu/NullMenuLabelTest/NullMenuLabelTest.java failed with NPE
* Bug fixes - PR1149: Zero-specific patch files not being packaged- use icedtea tarball for build again, this led into following dropped files because the are already in the tarball and simplified %prep and %build - drop class-rewriter.tar.gz - drop systemtap-tapset.tar.gz - drop desktop-files.tar.gz - drop nss.cfg - drop pulseaudio.tar.gz - drop remove-intree-libraries.sh - add archives from icedtea7-forest-2.3 for openjdk, corba, jaxp, jaxws, jdk, langtools and hotspot - drop rhino.patch, pulse-soundproperties and systemtap patch- move gnome bridge patches before make as it\'s irritating to have the patch fail after openjdk is built- use explicit file attributes in %files sections to prevent the file permissions problems in a future (like bnc#770040)- changed version scheme, so it now matches Oracle Java 1.7.0.6 == Java7 u 6
* Thu Aug 30 2012 mvyskocilAATTsuse.cz- update to icedtea-2.3.1 / OpenJDK7 u6 (bnc#777499)
* Security fixes - RH852051, CVE-2012-4681: Reintroduce PackageAccessible checks removed in 6788531.
* Bug fixes - PR902: PulseAudioClip getMicrosecondsLength() returns length in milliseconds, not microseconds - PR986: IcedTea7 fails to build with IcedTea6 CACAO due to low max heap size - PR1050: Stream objects not garbage collected - PR1119: Only add classes to rt-source-files.txt if the class (or one or more of its methods/fields) are actually missing from the boot JDK - PR1137: Allow JARs to be optionally compressed by setting COMPRESS_JARS
* OpenJDK - Make dynamic support for GConf work again. - PR1095: Add configure option for -Werror - PR1101: Undefined symbols on GNU/Linux SPARC - PR1140: Unnecessary diz files should not be installed - S7192804, PR1138: Build should not install jvisualvm man page for OpenJDK
* JamVM - ARMv6 armhf: Changes for Raspbian (Raspberry Pi) - PPC: Don\'t use lwsync if it isn\'t supported - X86: Generate machine-dependent stubs for i386 - When suspending, ignore detached threads that have died, this prevents a user caused deadlock when an external thread has been attached to the VM via JNI and it has exited without detaching - Add missing REF_TO_OBJs for references passed from JNI, this enable JamVM to run Qt-Jambi- there are number of fixes in 2.3, see NEWS
* Thu Jul 12 2012 mvyskocilAATTsuse.cz- icedtea 2.2.1 does not support zerovm, limit the build to i586 and x86_64
* Mon Jul 02 2012 mvyskocilAATTsuse.cz- fix bnc#769543: triplicate menu entries
* store jconsole and policytool in jvmdir and maintain symlink via update-alternatives only- use Settings;DesktopSettings;Security; for policytool- remove uneeded code generates fielists in install section
* Thu Jun 21 2012 mvyskocilAATTsuse.cz- update to icedtea-2.2.1
* Security fixes - S7079902, CVE-2012-1711: Refine CORBA data models - S7110720: Issue with vm config file loadingIssue with vm config file loading - S7143606, CVE-2012-1717: File.createTempFile should be improved for temporary files created by the platform. - S7143614, CVE-2012-1716: SynthLookAndFeel stability improvement - S7143617, CVE-2012-1713: Improve fontmanager layout lookup operations - S7143851, CVE-2012-1719: Improve IIOP stub and tie generation in RMIC - S7143872, CVE-2012-1718: Improve certificate extension processing - S7145239: Finetune package definition restriction - S7152811, CVE-2012-1723: Issues in client compiler - S7157609, CVE-2012-1724: Issues with loop - S7160677: missing else in fix for 7152811 - S7160757, CVE-2012-1725: Problem with hotspot/runtime_classfile - S7165628, CVE-2012-1726: Issues with java.lang.invoke.MethodHandles.Lookup- reduce number of file-listed-more-than-one for jre- remove hardcoded amd64 from systemtap path- use java-1_7_0-openjdk for build
* Thu Jun 14 2012 dmuellerAATTsuse.com- fix build on non-jit arches
* Thu May 10 2012 mvyskocilAATTsuse.cz- update to icedtea-2.1, openjdk b147
* Security fixes - 7082299, CVE-2011-3571: Fix in AtomicReferenceArray - S7088367, CVE-2011-3563: Fix issues in java sound - S7110683, CVE-2012-0502: Issues with some KeyboardFocusManager method - S7110687, CVE-2012-0503: Issues with TimeZone class - S7110700, CVE-2012-0505: Enhance exception throwing mechanism in ObjectStreamClass - S7110704, CVE-2012-0506: Issues with some method in corba - S7112642, CVE-2012-0497: Incorrect checking for graphics rendering object - S7118283, CVE-2012-0501: Better input parameter checking in zip file processing - S7126960, CVE-2011-5035: Add property to limit number of request headers to the HTTP Server
* Bug fixes - S7140882: Don’t return booleans from methods returning pointers - S7091528: javadoc attempts to parse .class files - S7103610: _NET_WM_PID and WM_CLIENT_MACHINE are not set - S7049339: AnyBlit is broken with non-rectangular clips. - and many others
* SUSE changes: - increase the priority to 17147 to be the default java (thanks Robert Munteau) - openjdk-7-src-b147-no-return-in-nonvoid.patch and openjdk-7-src-b147-stringcompare.patch fixes issues found by post-build-check - buildrequire at least openjdk6 and let prjconf to handle the prefferences
* Tue Mar 06 2012 cfarrellAATTsuse.com- license update: GPL-2.0-with-classpath-exception Use SPDX syntax
* Wed Nov 02 2011 mvyskocilAATTsuse.cz- Initial SUSE packaging of icedtea-2.0/openjdk b146