Login
Newsletter
Werbung

Sicherheit: Mehrere Probleme in java-1.7.0-openjdk
Aktuelle Meldungen Distributionen
Name: Mehrere Probleme in java-1.7.0-openjdk
ID: FEDORA-2013-19285
Distribution: Fedora
Plattformen: Fedora 18
Datum: Sa, 19. Oktober 2013, 00:14
Referenzen: Keine Angabe
Applikationen: OpenJDK

Originalnachricht

Name        : java-1.7.0-openjdk
Product : Fedora 18
Version : 1.7.0.60
Release : 2.4.3.0.fc18
URL : http://openjdk.java.net/
Summary : OpenJDK Runtime Environment
Description :
The OpenJDK runtime environment.

-------------------------------------------------------------------------------
-
Update Information:

Some information available at 7u-relnotes-515228.htmland full information soon available on http://blog.fuseyism.com/
-------------------------------------------------------------------------------
-
ChangeLog:

* Thu Oct 10 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.0.f18
- security update to icedtea 2.4.3 (u45, b15)
- removed upstreamed patch101 zero-s8024914.patch
- removed upstreamed patch102: zero-size_t.patch
- removed upstreamed patch1100: zero-entry_frame_call_wrapper.patch
- removed upstreamed patch1110: zero-zero_build.patch
- removed upstreamed patch1120: zero-gcdrainstacktargetsize.patch
- removed unnecessary revert patch404: RH661505-toBeReverted.patch
- fixed tapset for 32b archs
- source11 redecalred as 12
* Wed Oct 2 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.2.5.f18
- updated tapset to current head
- few cosmetic changes for more easy merging
* Thu Sep 19 2013 Dan Horák <dan[at]danny.cz> - 1.7.0.40-2.4.2.4.f18
- don't apply more patches on ARM
* Thu Sep 19 2013 Dan Horák <dan[at]danny.cz> - 1.7.0.40-2.4.2.3.f18
- don't apply the size_t patch on ARM
* Thu Sep 19 2013 Dan Horák <dan[at]danny.cz> - 1.7.0.40-2.4.2.2.f18
- fix build on zero arches (Andrew Hughes <gnu.andrew@redhat.com)
* Wed Sep 11 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.2.1.f18
- buildver replaced by updatever
- buildver reset to 60
- updatever set to 40
- added JDK_BUILD_NUMBER=b`printf "%02d" buildver to make parameters
- buildversion included in id
- desktop icons extracted to text files
* Fri Sep 6 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.4.2.0.f18
- updated to icedtea7-forest 2.4.2
- removed upstreamed patch404 aarch64.patch
- adapted patch104 java-1.7.0-openjdk-ppc-zero-jdk.patch
- adapted patch105 java-1.7.0-openjdk-ppc-zero-hotspot.patch
- added patch404 RH661505-toBeReverted.patch, to be *reverted* during prep
- buildver bumbed to 60
* Tue Sep 3 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.4.1.4.f18
- buildver bumbed to 31
- switched back to system lcms2
- removed patch 500 java-1.7.0-openjdk-disable-system-lcms
- added requires for lcms2 > 2.5
- removed unnecessary patch 112 java-1.7.0-openjdk-doNotUseDisabledEcc.patch
- added and used after build source 11, TestCryptoLevel.java
* Mon Sep 2 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.4.1.1.f18
- removed bootstrap (bootstrap*.patch and javac-wrapper)
- updated to icedtea 2.4
- added java-1.7.0-openjdk-doNotUseDisabledEcc.patch
- deleted usptreamed 657854-openjdk7.patch
- deleted usptreamed callerclass-01.patch
- deleted usptreamed callerclass-02.patch
- deleted usptreamed callerclass-03.patch
- deleted usptreamed callerclass-04.patch
- deleted usptreamed systemtap.patch
- added new file fsg.sh - to celan up sources
- adapted aarch64.patch
- adapted gstackbounds.patch
- adapted java-1.7.0-openjdk-disable-system-lcms.patch
- adapted java-1.7.0-openjdk-java-access-bridge-security.patch
- adapted java-1.7.0-openjdk-ppc-zero-hotspot.patch
- adapted java-1.7.0-openjdk-size_t.patch
- adapted java-1.7.0-openjdk.spec
- adapted rhino.patch
- temporarily disabled arm32 support (will need duplicated source tarball based
on 3.x or deeper fix for 2.4.x)
- added PStack-808293.patch aarch64.patch (sync with f19)
* Mon Aug 26 2013 Omair Majid <omajid@redhat.com> - 1.7.0.23-2.3.12.3.f18
- getCallerClass patches should be applied unconditionally.
* Tue Aug 20 2013 Omair Majid <omajid@redhat.com> - 1.7.0.23-2.3.12.2.f18
- Backport getCallerClass related patches from upstream that are not in a
release yet
* Fri Jul 26 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.12.1.f18
- refreshed icedtea7-forest 2.3.12
* Thu Jul 25 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.11.0.f18
- finally merged arm and main source tarballs
- updated to icedtea 2.3.11
- http://blog.fuseyism.com/index.php/2013/07/25/icedtea-2-3-11-released/
- removed patch 400, rhino for 2.1 and other 2.1 conditional stuff
- removed patch 103 arm-fixes.patch
- removed arm_arches variable in favour of standart arm one
- added ZERO_ARCHFLAG="-D_LITTLE_ENDIAN" for zero (arm) builds
* Wed Jul 3 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.7.f18
- moved to xz compression of sources
- updated 2.1 tarball
* Thu Jun 27 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.4.f18
- Sync with upstream IcedTea7-forest 2.3.10 tag
- Fixes regressions as introduced with previous 1.7.0.25 updates
- rhbz#978005, rhbz#977979, rhbz#976693, IcedTeaBZ#1487.
* Wed Jun 19 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.3.fc18
- update of IcedTea7-forest 2.3.10 tarball
* Thu Jun 13 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.2.fc18
- added patch1000 MBeanFix.patch to fix regressions caused by security patches
* Thu Jun 13 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.1.fc18
- arm tarball updated to 2.1.9
- build bumped to 25
* Wed Jun 12 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.19-2.3.10.0.fc18
- temporarly swithced to intree lcms as it have security fixes (patch 500)
- added GENSRCDIR="$PWD/generated.build" to be able to
- removed (build)requires lcms2(-devel)
- Updated to latest IcedTea7-forest 2.3.10
* Wed Jun 5 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.19-2.3.9.8.fc18
- Added client/server directories so they can be owned
- More usage of uniquesuffix
- Added fix for RH857717, owned /etc/.java/ and /etc/.java/.systemPrefs
* Wed May 22 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.19-2.3.9.7.fc18
- added variable arm_arches as restriction to some cases of not jit_arches
- size_t patch adapted to 2.3 which is now default on all except arm arches
* Fri May 17 2013 Omair Majid <omajid@redhat.com> - 1.7.0.19-2.3.9.6.fc18
- Replace java-1.7.0-openjdk with java-1.7.0-openjdk where it's used as a
unique suffix.
* Tue May 14 2013 Jiri Vanek <jvanek@redhat.com> 1.7.0.19-2.3.9.5.fc18
- patch402 gstackbounds.patch applied only to jit arches
* Tue May 7 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.19-2.3.9.4.fc19
- added patch 401 657854-openjdk7.patch (see 947731)
- fixed icons (see https://bugzilla.redhat.com/show_bug.cgi?id=820619)
- added patch 402 gstackbounds.patch - see (RH902004)
* Fri Apr 19 2013 Deepak Bhole <dbhole@redhat.com> -
1.7.0.19-2.3.9.3.fc18
- Updated 2.1.8 tarball
- Forcibly remove bfc file
* Thu Apr 18 2013 Deepak Bhole <dbhole@redhat.com> -
1.7.0.19-2.3.9.2.fc18
- Updated secondary arches to 2.1.8
- Removed upstreamed Zero allocation patch
* Tue Apr 16 2013 Jiri Vanek <jvanek@redhat.com - 1.7.0.19-2.3.9.1.fc18
- updated to updated IcedTea 2.3.9 with fix to one of security fixes
- fixed font glyph offset
- added client to ghosted classes.jsa
* Thu Apr 11 2013 Jiri Vanek <jvanek@redhat.com - 1.7.0.9-2.3.9.0.fc18
- updated to IcedTea 2.3.9 with latest security patches
- buildver sync to b19
- rewritten java-1.7.0-openjdk-java-access-bridge-security.patch
* Wed Apr 10 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.8.4.fc18
- fixed priority (one zero deleted)
- unapplied patch2
* Thu Apr 4 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.8.4.fc18
- added patch107 abrt_friendly_hs_log_jdk7.patch
- removed patch2 java-1.7.0-openjdk-java-access-bridge-idlj.patch
- removed redundant rm of classes.jsa, ghost is handling it correctly
* Tue Mar 26 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.8.3.fc18
- added manual deletion of classes.jsa
- ghost classes.jsa restricted to jitarches and to full path
- zlib in BuildReq restricted for 1.2.3-7 or higher
- see https://bugzilla.redhat.com/show_bug.cgi?id=904231
- Removed a -icedtea tag from the version
- package have less and less connections to icedtea7
- Added link to nss as noreplace bug to previous changelog item
* Mon Mar 25 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.8.1.fc18
- Bumped release
- Added and applied patch500 java-1.7.0-openjdk-fixZeroAllocFailure.patch
- to fix not-jit arches build
- is already in upstreamed icedtea 2.1
- Added gcc-c++ build dependence. Sometimes caused troubles during rpm -bb
- Added (Build)Requires for fontconfig and xorg-x11-fonts-Type1
- see https://bugzilla.redhat.com/show_bug.cgi?id=721033 for details
- Removed all fonconfig files. Fonts are now handled differently in JDK
and those files are redundant. This is going to be usptreamed.
- see https://bugzilla.redhat.com/show_bug.cgi?id=902227 for details
- logging.properties marked as config(noreplace)
- see https://bugzilla.redhat.com/show_bug.cgi?id=679180 for details
- classes.jsa marked as ghost
- see https://bugzilla.redhat.com/show_bug.cgi?id=918172 for details
- nss.cfg was marked as config(noreplace)
* Mon Mar 4 2013 Omair Majid <omajid@redhat.com> - 1.7.0.9-2.3.8.fc18
- Updated to icedtea7 2.3.8 (forest)
- Removed upstreamed patches contained in extra tarball.
* Sat Feb 16 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.7.fc18
- Updated to 2.3.7 icedtea7 tarball
- Updated the 2.1.6 icedtea7 tarball for arm
- Removed testing
- mauve was outdated and
- jtreg was icedtea relict
- Added java -Xshare:dump to post (see 513605) fo jitarchs
* Thu Feb 14 2013 Deepak Bhole <dbhole@redhat.com> - 1.7.0.9-2.3.6.fc17
- Updated to 2.3.6
- Updated the 2.1.5 tarball
- Removed upstreamed patches
* Mon Feb 11 2013 Deepak Bhole <dbhole@redhat.com> - 1.7.0.9-2.3.5.4.fc18
- Updated secondary arch tarball to 2.1.5
- Made Patch100* jit-arch specific-only (not needed for 2.1.5)
* Thu Feb 7 2013 Omair Majid <omajid@redhat.com> - 1.7.0.9-2.3.5.3.fc18
- Sync logging fixes with upstream (icedtea7-forest and jdk7u)
* Thu Feb 7 2013 Deepak Bhole <dbhole@redhat.com> - 1.7.0.9-2.3.5.1.fc18
- Added patch for 8005615 to fix regression caused by fix for 6664509
* Wed Feb 6 2013 Deepak Bhole <dbhole@redhat.com> - 1.7.0.9-2.3.5.fc18.1
- Backed out 6664509 and 7201064.patch which cause regressions
* Sun Feb 3 2013 Deepak Bhole <dbhole@redhat.com> - 1.7.0.9-2.3.5.fc18
- Updated to 2.3.5
- Removed unnecessary GENSRCDIR flag
* Sun Feb 3 2013 Deepak Bhole <dbhole@redhat.com> - 1.7.0.9-2.3.4.2.fc18
- Bumped to 2.3.5pre (2.3.4 + Feb. 2013 CPU)
* Wed Jan 16 2013 Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.4.1.fc18
- Added idlj slave to javac
- Added jcmd slave to javac
- Release incremented
* Mon Jan 14 2013 Deepak Bhole <dbhole@redhat.com> - 1.7.0.9-2.3.4.fc18
- Updated to 2.3.4
* Thu Dec 6 2012 jiri Vanek <jvanek@redhat.com> - 1.7.0.6-2.3.2.fc18.2
- introduced tmp-patches source tarball
- added kerberos fix (see rhbz#871771)
- added OpenOffice crusher fix (see oracle's 8004344)
-------------------------------------------------------------------------------
-

This update can be installed with the "yum" update program. Use
su -c 'yum update java-1.7.0-openjdk' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce
Pro-Linux
Traut euch!
Neue Nachrichten
Werbung