-
Wed Jan 16 2013 Kevin Lyons <kevin.x.lyons@oracle.com> - 1.7.0.9-2.3.4.1.0.1.el6_3
- Update DISTRO_NAME in specfile
-
Tue Jan 15 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.4.1.el6
- Rewerted to IcedTea 2.3.4
- rewerted patch105: java-1.7.0-openjdk-disable-system-lcms.patch
- removed jxmd and idlj to alternatives
- make NOT executed with DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
- re-applied patch302 and restored systemtap.patch
- buildver set to 9
- icedtea_version set to 2.3.4
- unapplied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
- restored tmp-patches source tarball
- removed /lib/security/US_export_policy.jar and lib/security/local_policy.jar
- java-1.7.0-openjdk-java-access-bridge-security.patch's path moved from
java.security-linux back to java.security
- Resolves: rhbz#895033
-
Mon Jan 14 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.11-2.4.0.1.el6
- Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
- Added jxmd and idlj to alternatives
- make executed with DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
- Unapplied patch302 and deleted systemtap.patch
- buildver increased to 11
- icedtea_version set to 2.4.0
- Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
- removed tmp-patches source tarball
- Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
- Resolves: rhbz#895033
-
Fri Nov 30 2012 Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.3.2.el6
- Sync with 6.4
- introduced tmp-patches source tarball
- release tag moved before dist (see 875245)
- Resolves: rhbz#880352
-
Mon Oct 15 2012 Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.3.el6.1
- Changed permissions of sa-jdi.jar to correct 644
- Resolves: rhbz#865050
-
Thu Oct 11 2012 Deepak Bhole <dbhole@redhat.com> - 1.7.0.9-2.3.3.el6
- Updated to 2.3.3
- Updated java-1.7.0-openjdk-java-access-bridge-security.patch
- Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
865519, 865531, 865541, 865568
-
Wed Sep 19 2012 Jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.3.2.el6.1
- Cleanup before security release
- Updated to latest IcedTea7-forest 2.3
- Resolves: rhbz#852299
-
Wed Sep 19 2012 Jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.1.el6.4
- Cleanup before security release
- Removed patches:
patch 1001 sec-webrevs-openjdk7-29_aug_2012-7162473.patch
patch 1002 sec-webrevs-openjdk7-29_aug_2012-7162476.patch
patch 1003 sec-webrevs-openjdk7-29_aug_2012-7163201.patch
patch 1004 sec-webrevs-openjdk7-29_aug_2012-7194567.patch
patch 1005 sec-webrevs-openjdk7-29_aug_2012-78e01a6ca8d3.patch
- Resolves: rhbz#852299
-
Wed Aug 29 2012 Jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.el6.3
- Removed patch 304 java-1.7.0-openjdk-beans-isPackageAccessible.patch
- Applied upstream patches for same issue:
patch 1001 sec-webrevs-openjdk7-29_aug_2012-7162473.patch
patch 1002 sec-webrevs-openjdk7-29_aug_2012-7162476.patch
patch 1003 sec-webrevs-openjdk7-29_aug_2012-7163201.patch
patch 1004 sec-webrevs-openjdk7-29_aug_2012-7194567.patch
patch 1005 sec-webrevs-openjdk7-29_aug_2012-78e01a6ca8d3.patch
- Resolves: rhbz#852299
-
Wed Aug 29 2012 Jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.1.el6
- Added patch 304 java-1.7.0-openjdk-beans-isPackageAccessible.patch
to fix vulnerability until it is fixed in upstream sources.
- Resolves: rhbz#852299
-
Thu Jun 14 2012 jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.el6
- Updated priority to be > 17000 and to depend on buildver variable
- Variable buildver increased to 5 as it should be
- Resolves: rhbz#828759
-
Thu Jun 14 2012 jiri Vanek <jvanek@redhat.com> - 1.7.0.3-2.2.1.el6
- Used newly prepared tarball with security fixes
- Bump to icedtea7-forest-2.2.1
- _mandir/man1/jcmd-name.1 added to alternatives
- Updated rhino.patch
- Updated java-1.7.0-openjdk-java-access-bridge-security.patch
- Modified partially upstreamed patch302 - systemtap.patch
- Temporarly disabled patch102 - java-1.7.0-openjdk-size_t.patch
- Removed already upstreamed patches 104,108,109,301,110:
- java-1.7.0-openjdk-arm-ftbfs.patch
- java-1.7.0-openjdk-system-zlib.patch
- java-1.7.0-openjdk-remove-mimpure-opt.patch
- systemtap-alloc-size-workaround.patch
- java-1.7.0-fix-gio-detection.patch
- Access gnome bridge jar forced to be 644
- Added patch303 - java-1.7.0-openjdk-jstack.patch which resolved RH804632 for openjdk6
- Resolves: rhbz#828759
-
Tue May 01 2012 Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6.7
- Updated priority to be higher than GCJ but lower than OpenJDK6
-
Sat Apr 28 2012 Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6.6
- Added patch to fix GIO detection
-
Wed Apr 18 2012 Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6.5
- Fix global definition yet again
-
Wed Apr 18 2012 Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6.4
- Removed commented global declaration as RPM was NOT ignoring it
-
Tue Apr 17 2012 Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6.3
- Added ALT_STRIP_POLICY="no_strip" flag so that binaries are not stripped
- Collapsed if cases for x86
- Decreased priority
- Removed xalan and xerces reqs in favor of libxslt which is what we use
-
Wed Apr 04 2012 Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6.2
- Fixed DISTRO_NAME, DISTRO_PACKAGE_VERSION and JDK_UPDATE_VERSION
- Fixed umask
-
Tue Mar 27 2012 Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6.1
- Synched with 7.0 branch
- Removed unnecessary unsetting of USE_SYSTEM_LCMS
- Added SystemTap fixes from Mark Wielaard
-
Wed Mar 21 2012 Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6
- Imported from Fedora into RHEL 6.3 branch
- Removed unused macros
- Removed rh740762 patch (removed from Fedora now too)
- Disabled system lcms (not available in RHEL6)
- Updated virtual provides to provide "7" specific items
- Made exclusive arch for i686 and x86_64
-
Mon Mar 12 2012 Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.fc17.2
- Resolved rhbz#740762: java.library.path is missing some paths
- Unified spec file for x86, x86_64, ARM and s390
- Integrated changes from Dan Horák <dhorak@redhat.com> for Zero/s390
- Integrated changes from Chris Phillips <chphilli@redhat.com> for Zero/ARM
-
Fri Feb 24 2012 Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.fc17.1
- Added flag so that debuginfo is built into classfiles (rhbz# 796400)
- Updated rhino.patch to build scripting support (rhbz# 796398)
-
Tue Feb 14 2012 Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1
- Updated to OpenJDK7u3/IcedTea7 2.1
- Removed upstreamed glibc nameclash patch
- Added patch to remove the -mimpure option to gcc
- Security fixes:
- S7112642, CVE-2012-0497: Incorrect checking for graphics rendering object
- S7082299, CVE-2011-3571: AtomicReferenceArray insufficient array type check
- S7110687, CVE-2012-0503: Unrestricted use of TimeZone.setDefault
- S7110700, CVE-2012-0505: Incomplete info in the deserialization exception
- S7110683, CVE-2012-0502: KeyboardFocusManager focus stealing
- S7088367, CVE-2011-3563: JavaSound incorrect bounds check
- S7126960, CVE-2011-5035: Add property to limit number of request headers to the HTTP Server
- S7118283, CVE-2012-0501: Off-by-one bug in ZIP reading code
- S7110704, CVE-2012-0506: CORBA fix
- Add patch to fix compilation with GCC 4.7
-
Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.7.0.1-2.0.3.1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
-
Tue Nov 08 2011 Deepak Bhole <dbhole@redhat.com> - 1.7.0.1-2.0.3
- Added patch to fix bug in jdk_generic_profile.sh
- Compile with generic profile to use system libraries
- Made remove-intree-libraries.sh more robust
- Added lcms requirement
- Added patch to fix glibc name clash
- Updated java version to include -icedtea
-
Sun Nov 06 2011 Deepak Bhole <dbhole@redhat.com> - 1.7.0.1-2.0.2
- Added missing changelog entry
- Updated Provides
-
Sun Nov 06 2011 Deepak Bhole <dbhole@redhat.com> - 1.7.0.1-2.0.1
- Updated to IcedTea 2.0 tag in the IcedTea OpenJDK7 forest
- Removed obsoleted patches
- Added system timezone support
- Revamp version/release naming scheme to make it proper
- Security fixes
- S7000600, CVE-2011-3547: InputStream skip() information leak
- S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor
- S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow
- S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager
- S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine
- S7055902, CVE-2011-3521: IIOP deserialization code execution
- S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks
- S7064341, CVE-2011-3389: HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)
- S7070134, CVE-2011-3558: HotSpot crashes with sigsegv from PorterStemmer
- S7077466, CVE-2011-3556: RMI DGC server remote code execution
- S7083012, CVE-2011-3557: RMI registry privileged code execution
- S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection
-
Mon Aug 29 2011 Deepak Bhole <dbhole@redhat.com> - 1.7.0.0-0.1.20110823.1
- Provide a "7" version of items to enfore F-16 policy of no Java 7 builds
- Resolves: rhbz#728706, patch from Ville Skyttä <ville.skytta at iki dot fi>
-
Fri Aug 05 2011 Deepak Bhole <dbhole@redhat.com> - 1.7.0.0-0.1.20110803
- Use a newer snapshot and forest on classpath.org rather than on openjdk.net
- Added in-tree-removal script to remove libraries that we manually link
- Updated snapshots
- Added DISTRO_NAME and FreeType header/lib locations
- Removed application of patch100 and patch 113 (now in forest)
-
Wed Aug 03 2011 Deepak Bhole <dbhole@redhat.com> - 1.7.0.0-0.1.20110729
- Initial build from java-1.6.0-openjdk RPM