Changelog for java-1.6.0-openjdk-1.6.0.0-21.b22-mdv2011.0.i586.rpm :

* Fri Jun 17 2011 Oden Eriksson 0:1.6.0.0-21.b22mdv2011.0+ Revision: 685825- icedtea6 1.10.2
* Thu Jun 16 2011 Oden Eriksson 0:1.6.0.0-20.b22+ Revision: 685495- use the same release for backports, makes it a lot easier
* Wed Jun 15 2011 Oden Eriksson 0:1.6.0.0-19.b22+ Revision: 685412- fix deps (for backports/updates)- corrrect the backport/updates release string
* Wed May 25 2011 Paulo Andrade 0:1.6.0.0-18.b22+ Revision: 678905- Update to icedtea 1.10.1 and openjdk b22
* Tue May 24 2011 Paulo Andrade 0:1.6.0.0-17.b20+ Revision: 678015- Rework package to rebuild in cooker
* Sun Mar 13 2011 Paulo Andrade 0:1.6.0.0-16.b20+ Revision: 644445- Rebuild with systemtap support enabled + Funda Wang - rebuild to obsolete old packages
* Wed Feb 16 2011 Paulo Andrade 0:1.6.0.0-14.b20+ Revision: 638056- Update to openjdk b20 and icedtead 1.9.7
* Security updates - S6878713, CVE-2010-4469: Hotspot backward jsr heap corruption - S6907662, CVE-2010-4465: Swing timer-based security manager bypass - S6994263, CVE-2010-4472: Untrusted code allowed to replace DSIG/C14N implemntation - S6981922, CVE-2010-4448: DNS cache poisoning by untrusted applets - S6983554, CVE-2010-4450: Launcher incorrect processing of empty library pathentries - S6985453, CVE-2010-4471: Java2D font-related system property leak - S6927050, CVE-2010-4470: JAXP untrusted component state manipulation - RH677332, CVE-2011-0706: Multiple signers privilege escalation
* Bug fixes - RH676659: Pass -export-dynamic flag to linker using -Wl, as option in gcc 4.6+is broken - Fix latent JAXP bug caused by missing import- Update to icedtea 1.8.6 with security updates:
* RH672262, CVE-2011-0025: IcedTea jarfile signature verification bypass
* S4421494, CVE-2010-4476: infinite loop while parsing double literal
* Tue Jan 18 2011 Paulo Andrade 0:1.6.0.0-12.b18+ Revision: 631635-
* Security updates - RH663680, CVE-2010-4351: IcedTea JNLP SecurityManager bypass
* Backports - S6438179, RH569121: XToolkit.isTraySupported() result has nothing to do with the system tray - S4356282: RFE: JDK should support OpenType/CFF fonts - S6954424, RH525870: Support OpenType/CFF fonts in JDK 7 - S6795356, PR590: Leak caused by javax.swing.UIDefaults.ProxyLazyValue.acc - S6967436, RH597227: lines longer than 2^15 can fill window. - S6967433: dashed lines broken when using scaling transforms. - S6976265: No STROKE_CONTROL - S6967434, PR450, RH530642: Round joins/caps of scaled up lines have poor quality.
* Fixes: - S7003777, RH647674: JTextPane produces incorrect content after parsing the html text
* Wed Nov 24 2010 Paulo Andrade 0:1.6.0.0-11.b18mdv2011.0+ Revision: 600880- Update to icedtea 1.8.3
* Fri Oct 29 2010 Paulo Andrade 0:1.6.0.0-10.b18mdv2011.0+ Revision: 590306- Correct a memory and a mutex leak- Update to icedtea 1.8.2
* Thu Oct 14 2010 Oden Eriksson 0:1.6.0.0-9.b18mdv2011.0+ Revision: 585595- keep it backportable for security updates
* Thu Sep 02 2010 Thierry Vignaud 0:1.6.0.0-8.b18mdv2011.0+ Revision: 575205- let the doc subpackage be noarch
* Sat Jul 31 2010 Paulo Andrade 0:1.6.0.0-7.b18mdv2011.0+ Revision: 563827- Update to icedtea 1.8.1.
* Tue May 18 2010 Paulo Andrade 0:1.6.0.0-6.b18mdv2010.1+ Revision: 545063- Don\'t explicitly link to xulrunner allowing chromium-browser to use openjdk
* Fri May 07 2010 Paulo Andrade 0:1.6.0.0-5.b18mdv2010.1+ Revision: 543083+ rebuild (emptylog)
* Mon Apr 26 2010 Oden Eriksson 0:1.6.0.0-4.b18mdv2010.1+ Revision: 538943- 2009.0 and up does not have xulrunner-devel-unstable- really prepare for main/testing- prepare for main/testing
* Tue Apr 20 2010 Paulo Andrade 0:1.6.0.0-3.b18mdv2010.1+ Revision: 537258- Correct an off by one misallocation that may cause random behavior
* Fri Apr 16 2010 Oden Eriksson 0:1.6.0.0-2.b18mdv2010.1+ Revision: 535395- fix backport release as 2010.0 was named java-1.6.0-openjdk-1.6.0.0-0.20.b16.
* Thu Apr 15 2010 Paulo Andrade 0:1.6.0.0-1.b18mdv2010.1+ Revision: 535169- Restore generate-fedora-zip.sh to actually match fedora version- Update to icedtea6-1.8 + Oden Eriksson - added backporting magic for updates
* Fri Feb 26 2010 Oden Eriksson 0:1.6.0.0-0.20.b17.2mdv2010.1+ Revision: 511884- fix borked deps (duh!)- rebuild
* Tue Feb 09 2010 Paulo Andrade 0:1.6.0.0-0.20.b17.1mdv2010.1+ Revision: 503395- Make systemtap support conditional, and default to disabled.- Update to icedtea 1.7 and openjdk b17
* Mon Feb 01 2010 Funda Wang 0:1.6.0.0-0.20.b16.14mdv2010.1+ Revision: 498972- merge mandriva-fontpath patch for CJK fonts, and fedora\'s own font patch
* Tue Jan 19 2010 Paulo Andrade 0:1.6.0.0-0.20.b16.13mdv2010.1+ Revision: 493933- Patch plugin code to work with firefox 3.6.0 + Oden Eriksson - fix libxul pkg-config discovery conditionally - support libjpeg v8 too (conditionally) - rebuilt against libjpeg v8 + Tomasz Pawel Gajc - rebuild for new xulrunner (OJI interface has been obsoleted in xulrunner, NPAPI is standard now)
* Fri Oct 30 2009 Paulo Andrade 0:1.6.0.0-0.20.b16.11mdv2010.1+ Revision: 460213- Correct installation of fontconfig.properties file (#55005)
* Tue Oct 27 2009 Frederic Crozat 0:1.6.0.0-0.20.b16.10mdv2010.0+ Revision: 459521- Force rebuild + Paulo Andrade - Correct loop at 100%% cpu in ix86 when loading some java plugins in firefox.
* Wed Oct 14 2009 Rafael da Veiga Cabral 0:1.6.0.0-0.20.b16.8mdv2010.0+ Revision: 457302- removes Fedora changes required to link with their x11-proto-devel- add x11-proto-devel-header.patc (changes shmproto.h to XShm.h)- change version of x11-proto-devel buildrequire (7.4 does not holds required headers)- add x11-proto-devel build require (shmproto.h)- update hotspot.tar.gz (fedora)- add java-1.6.0-openjdk-x11.patch- add new icedtea6-1.6- removed patches due the new icedtea: java-1.6.0-openjdk-netxandplugin.patch java-1.6.0-openjdk-securitypatches.patch java-1.6.0-openjdk-no-ht-support.patch java-1.6.0-openjdk-agent-allfiles.patch java-1.6.0-openjdk-link-cpp.patch icedtea-ignore-unrecognized-options.patch icedtea-sparc-trapsfix.patch- rebzipping openjdk source without openjdk dir (needed to build)- should solve both #53803 and #53809- some clean up on spec to keep it fedora like
* Wed Oct 07 2009 Thierry Vignaud 0:1.6.0.0-0.20.b16.7mdv2010.0+ Revision: 455482- move huge changelog in devel package
* Tue Sep 29 2009 Christophe Fergeau 0:1.6.0.0-0.20.b16.6mdv2010.0+ Revision: 450806- use more accurate Requires (since we dlopen the lib name)- add explicit Requires: on libjpeg7 since it\'s dlopened- make sure we use libjpeg7 and not libjpeg62 + Nicolas Lécureuil - Rebuild for libjepg7
* Mon Aug 24 2009 Tomasz Pawel Gajc 0:1.6.0.0-0.20.b16.4mdv2010.0+ Revision: 420218- rebuild for new xulrunner
* Sat Aug 15 2009 Oden Eriksson 0:1.6.0.0-0.20.b16.3mdv2010.0+ Revision: 416527- rebuilt against libjpeg v7
* Fri Aug 14 2009 Rafael da Veiga Cabral 0:1.6.0.0-0.20.b16.2mdv2010.0+ Revision: 416396- added java-1.6.0-openjdk-netxandplugin.patch and java-1.6.0-openjdk-securitypatches.patch to fix security issues: (CVE-2009-0217, CVE-2009-2475, CVE-2009-2476, CVE-2009-2625, CVE-2009-2670, CVE-2009-2671, CVE-2009-2673, CVE-2009-2674, CVE-2009-2675, CVE-2009-2689, CVE-2009-2690 and CVE-2009-1896)
* Tue Jun 09 2009 Rafael da Veiga Cabral 0:1.6.0.0-0.20.b16.1mdv2010.0+ Revision: 384362- Build 16 embeddeds a new 1.18 lcms with security fixes for CVE-2009-0581, CVE-2009-0723, CVE-2009-0733 and for CVE-2009-0793, so this release disable java-1.6.0-openjdk-lcms.patch- java-1.6.0-openjdk-securitypatches.patch and java-1.6.0-openjdk-pulsejava.patch were merged upstream and a further check was done to make sure fixes were there- java-1.6.0-openjdk-set-cookie-handling.patch were merged upstream- added a fixed icedtea-ignore-unrecognized-options.patch- icedtea-sparc-trapsfix.patch fixes icedtea-sparc-trapsfix.patch- fix-icedtea-shark-build.patch fixes icedtea-shark-build.patch- java-1.6.0-openjdk-link-cpp.patch rediffed- java-1.6.0-openjdk-sparc-fixes.patch rediffed- openjdk-6-src-b16-24_apr_2009-fedora.tar.gz source code was ripped from fc 11 and changed to a bzip2 archive- According Joe Darcy from SUN the other non security bugs fixed in this build are: - 6761791: Crash in the FontManager code due to use of JNIEnv saved by another thread - 6512707: \"incompatible types\" after (unrelated) annotation processing - 6632696: Writing to closed output files (writeBytes) leaks native memory (unix) - 6788196: (porting) Bounds checks in io_util.c rely on undefined behaviour - 6791458: FileInputStream/RandomAccessFile.read leaks memory if invoked on closed stream with len > 8k - 6792066: src/share/native/java/io/io_util.c clean-ups - 6819886: System.getProperty(\"os.name\") reports Vista on Windows 7 - 6821031: Upgrade OpenJDK\'s LittleCMS version to 1.18 - 6800572: Removing elements from views of NavigableMap implementations does not always work correctly. - 6801020: Concurrent Semaphore release may cause some require thread not signaled - 6806019: 38 JCK api/javax_sound/midi/ tests fails starting from jdk7 b46 - 6803402: Race condition in AbstractQueuedSynchronizer - 6793757: Fix formatting of copyright notices in Gervill - 6794201: remove unused sources - 6808724: UninitializedDisplayModeChangeTest/DisplayModeChanger.java has wrong legal notice - 6821030: Merge OpenJDK Gervill with upstream sources, Q1CY2009 - 6823445: Gervill SoftChannel/ResetAllControllers jtreg test fails after portamento fix from last merge - 6823446: Gervill SoftLowFrequencyOscillator fails when freq is set to 0 cent or 8.1758 Hz. - 6824976: Fix NAWK assignment in shell script jdk/make/java/java/genlocales.gmk - 6828183: testcase from SSR09_01 into jdk6-open hangs
* Fri May 22 2009 Funda Wang 0:1.6.0.0-0.19.b14.4mdv2010.0+ Revision: 378633- use our own CJK fonts path
* Wed Apr 15 2009 Oden Eriksson 0:1.6.0.0-0.19.b14.3mdv2009.1+ Revision: 367368- rebuild- make it backport to 2009.0
* Tue Apr 14 2009 Tomasz Pawel Gajc 0:1.6.0.0-0.19.b14.2mdv2009.1+ Revision: 366854- Patch105: prevents endlessly waiting for cookies (mdvbz #49908)
* Sun Apr 12 2009 Frederik Himpe 0:1.6.0.0-0.19.b14.1mdv2009.1+ Revision: 366452- Sync with Fedora\'s 1.6.0-19.b14:
* Add patches fixing security vulnerabilities in lcms (CVE-2009-0581, CVE-2009-0723, CVE-2009-0733) and pulseaudio output(CVE-2009-0794)
* Add OpenJDK patch fixing these security bugs according to Ubuntu changelog: - 6522586: Enforce limits on Font creation. - 6536193: flaw in UTF8XmlOutput. - 6610888: Potential use of cleared of incorrect acc in JMX Monitor. - 6610896: JMX Monitor handles thread groups incorrectly. - 6630639: lightweight HttpServer leaks file descriptors on no-data connections. - 6632886: Font.createFont can be persuaded to leak temporary files. - 6636360: compiler/6595044/Main.java test fails with 64bit java on solaris-sparcv9 with SIGSEGV. - 6652463: MediaSize constructors allow to redefine the mapping of standard MediaSizeName values. - 6652929: Font.createFont(int,File) trusts File.getPath. - 6656633: getNotificationInfo methods static mutable (findbugs). - 6658158: Mutable statics in SAAJ (findbugs). - 6658163: txw2.DatatypeWriter.BUILDIN is a mutable static (findbugs). - 6691246: Thread context class loader can be set using JMX remote ClientNotifForwarded. - 6717680: LdapCtx does not close the connection if initialization fails. - 6721651: Security problem with out-of-the-box management. - 6737315: LDAP serialized data vulnerability. - 6792554: Java JAR Pack200 header checks are insufficent. - 6804996: JWS PNG Decoding Integer Overflow [V-flrhat2ln8]. - 6804997: JWS GIF Decoding Heap Corruption [V-r687oxuocp]. - 6804998: JRE GIF Decoding Heap Corruption [V-y6g5jlm8e1].
* Update icedtea from hg snapshot to release 1.4.1
* Update visualvm and netbeans profiler releases
* Update makefile patch to remove parts integrated upstream
* Add some archs supported by hotspot- Extract hotspot tarball by hand, because the configure script would not do this because some other sources or patches already created the hotspot directory- Renumber patches and sources to correspond with Fedora\'s numbering
* Wed Dec 17 2008 David Walluck 0:1.6.0.0-0.18.b14.1mdv2009.1+ Revision: 315308- rediff patches- add hotspot.tar.gz- b14
* Sat Nov 15 2008 David Walluck 0:1.6.0.0-0.17.b13.1mdv2009.1+ Revision: 303481- set pkgversion to include release info- make visualvm support optional- spec cleanup- fix Release- b13
* Sun Aug 10 2008 David Walluck 0:1.6.0.0-0.16.b11.4mdv2009.0+ Revision: 270163- install mozilla plugin into syslibdir + Anssi Hannula - restore lost cacerts changes (fixes broken cacerts symlink)
* Thu Aug 07 2008 David Walluck 0:1.6.0.0-0.16.b11.1mdv2009.0+ Revision: 266632- fix IcedTeaPlugin build requirements- fix Release- remove BuildRequires: firefox-devel- remove openjdk-do-not-redefine-bcopy-bcmp-bzero.patch as it is part of icedtea6 now- rediff icedtea6-1.2-policytool-desktop.patch- fix xulrunner-devel-unstable BuildRequires- update to b11 + Thierry Vignaud - rebuild early 2009.0 package (before pixel changes) + Per Øyvind Karlsen - drop P8, static linking can be disabled with STATIC_CXX=false in stead.. + Nicolas Lécureuil - Do no show policytool on KDE menu + Anssi Hannula - icedtea6 1.2, with openjdk6 b09 - sync with fedora 1.6.0.0-0.16.b09 - add do-not-redefine-bcopy-bcmp-bzero.patch and link-cpp2.patch (replacing $STATIC_CXX) to fix build issues - drop now unneeded -fno-tre-vrp compiler flag - drop now unneeded JAVACMD hacks - set ALT_COMPILER_PATH=\"\" to avoid calling /usr/bin/gcc explicitely (for ccache et al) - use rootcerts-java for cacerts file - drop jhat.patch, fixed in icedtea6 patchset (also update generate-dfsg-zip.sh accordingly and regenerate dfsg archive) + Pixel - rpm filetriggers deprecates update_menus/update_scrollkeeper/update_mime_database/update_icon_cache/update_desktop_database/post_install_gconf_schemas