Next | Query returned 79 messages, browsing 31 to 40 | Previous

History of commit frequency

CVS Commit History:


   2011-06-09 11:08:18 by OBATA Akio | Files touched by this commit (8)
Log message:
Update sun-{jre,jdk}6 to 6.0.26, aka 6u26.

Java SE 6 Update 26
* Olson Data 2011g
* Bug fixes
  This release contains fixes for security vulnerabilities. For more
  information, please see Oracle Java SE Critical Patch Update advisory:
  http://www.oracle.com/technetwork/topics/security/javacpujune2011-313339.html

Java SE 6 Update 25
* Olson Data 2011b
* Java Hotspot VM 20
* Performance Improvement to BigDecimal
* Performance Improvement to java.util.logging.LogRecord
* Bug Fixes
   2011-02-21 08:48:20 by OBATA Akio | Files touched by this commit (7)
Log message:
Update sun-{jre,jdk}6 to 6.0.24.

Java SE 6 Update 24
* OlsonData 2010o
* Java DB 10.6.2.1
* Bug Fixes, include following security fix.
	CVE-2010-4422
	CVE-2010-4447
	CVE-2010-4448
	CVE-2010-4450
	CVE-2010-4451
	CVE-2010-4452
	CVE-2010-4454
	CVE-2010-4462
	CVE-2010-4463
	CVE-2010-4465
	CVE-2010-4466
	CVE-2010-4467
	CVE-2010-4468
	CVE-2010-4469
	CVE-2010-4470
	CVE-2010-4471
	CVE-2010-4472
	CVE-2010-4473
	CVE-2010-4474
	CVE-2010-4475
	CVE-2010-4476

Java SE 6 Update 23
* OlsonData 2010l
* Java Hotspot VM 19.0
* Java VisualVM 1.3.1
* Menu Item Corrections for Right-to-Left Languages
* Additional Languages Support in Linux Systems
* Bug Fixes
   2010-10-23 14:26:33 by OBATA Akio | Files touched by this commit (2)
Log message:
Remove a file from PLIST, it will be regenerated in POST-INSTALL.

Bump PKGREVISION.
   2010-10-16 06:41:19 by OBATA Akio | Files touched by this commit (9) | Package updated
Log message:
Update Sun Java SE 6 to 1.6.0_22, a.k.a. 6.0.22.

[Changes in 1.6.0_22 (6u22)]
http://www.oracle.com/technetwork/java/javase/6u22releasenotes-176121.html

* OlsonData 2010l

* Root Certificates

  Added new Entrust Root CA-G2 and updated Entrust.net CA (2048) root
  certificates. (Refer to 6959911.)

* Bug Fixes
  This release contains fixes for security vulnerabilities. For more
  information, please see Oracle Java SE and Java for Business Critical Patch
  Update advisory.
  http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html

[Changes in 1.6.0_21 (6u21)]
http://www.oracle.com/technetwork/java/javase/6u21-156341.html
* OlsonData 2010i
   2010-06-06 11:51:49 by OBATA Akio | Files touched by this commit (6) | Package updated
Log message:
Update sun-{jre,jdk}6 to 6.0.20, aka 1.6.0_20.

Changes in 1.6.0_20 (6u20)
* OlsonData 2010b
* A Java Network Launch Protocol (JNLP) file without a codebase parameter, such
  as the following, will no longer work with the Java SE 6 update 20 release.
      <jnlp spec="0.2 1.0" href="draw.jnlp">
  This means that developers must specify the codebase parameter in a JNLP file.
  See the following example:
      <jnlp spec="0.2 1.0"
            \ 
codebase="http://java.sun.com/javase/technologies/desktop/javawebstart/apps/"
            href="draw.jnlp">
* This release contains fixes for security vulnerabilities.
  For more information, please see Oracle Security Alert for CVE-2010-0886

Changes in 1.6.0_19 (6u19)
* OlsonData 2010b
* Root Certificates
* Ensuring Application and Applet Security when Mixing Signed and Unsigned Code
* Interim Fix for the Transport Layer Security (TLS) Man-in-the-Middle Attack
* Bug Fixes

Changes in 1.6.0_18 (6u18)
* OlsonData 2009s
* VisualVM 1.2
* Java DB 10.5.3.0
* Performance Improvements
* Deployment Updates
* JSR-173 StAX 1.2 API Upgrade
* Bug Fixes
   2010-03-31 04:35:05 by Joerg Sonnenberger | Files touched by this commit (1)
Log message:
Allow build on DragonFly. From PR 43085
   2009-11-22 20:27:21 by David Brownlee | Files touched by this commit (2) | Package updated
Log message:
Updated lang/sun-jre6 to 6.0.17

6u17 contains Olson time zone data version 2009m. For more information, refer to \ 
Timezone Data Versions in the JRE Software .

Security Baseline

6u17 specifies the following security baselines for use with Java Plug-in technology:
JRE Family Version 	Java SE
Security Baseline 	Java SE for Business
Security Baseline 6 	1.6.0_17 	1.6.0_17
5.0 	1.5.0_22 	1.5.0_22
1.4.2 	1.4.2_19 	1.4.2_24

Root Certificates

Root Certificates are included in this release.

    * Added one new root certificate for SECOM. (Refer to 6872579.)
    * Added one new root certificate for GlobalSign. (Refer to 6860447.)

Bug Fixes

This release contains fixes for one or more security vulnerabilities.
For more information, please see Sun Alerts 269868, 269869, 269870,
270474, 270475, and 270476.

Bug fixes for vulnerabilities are listed in the following table.
	BugId 	Category 	Subcategory 	Description 6631533 	java 	classes_2d \ 
	ICC_Profile allows detecting if some files exist
6815780 	java 	classes_2d 	TrueType font parsing crash when stressing Sun Bug \ 
6751322 test case
6822057 	java 	classes_2d 	X11 and Win32GraphicsDevice don't clone arrays \ 
returned from getConfigurations()
6862969 	java 	classes_2d 	JPEG JFIF Decoder issue
6862970 	java 	classes_2d 	Image Color Profile parsing issue
6872357 	java 	classes_2d 	JRE AWT setDifflCM vulnerable to Stack Overflow
6872358 	java 	classes_2d 	JRE AWT setBytePixels vulnerable to Heap Overflow
6664512 	java 	classes_awt 	Component and [Default]KeyboardFocusManager pass \ 
security sensitive objects to loggers
6636650 	java 	classes_lang 	(cl) Resurrected ClassLoaders can still have children
6861062 	java 	classes_security 	Disable MD2 in certificate chain validation
6863503 	java 	classes_security 	SECURITY: MessageDigest.isEqual introduces \ 
timing attack vulnerabilities
6864911 	java 	classes_security 	ASN.1/DER input stream parser needs more work
6854303 	java 	classes_sound 	Sun Java HsbParser.getSoundBank Stack Buffer \ 
Overflow Vulnerability
6657026 	java 	classes_swing 	Numerous static security flaws in Swing (findbugs)
6657138 	java 	classes_swing 	Mutable statics in Windows PL&F (findbugs)
6824265 	java 	classes_util_i18n 	(tz) TimeZone.getTimeZone allows probing local \ 
filesystem
6632445 	java 	imageio 	DoS from parsing BMPs with UNC ICC links
6862968 	java 	imageio 	JPEG Image Writer quantization problem
6874643 	java 	imageio 	ImageI/O JPEG is vulnerable to Heap Overflow
6869694 	java 	install 	java update malfunctioning
6869752 	java_deployment 	deployment_toolkit 	Deployment Toolkit plugin \ 
"launch" method vulnerable to exploits
6872824 	javawebstart 	general 	arbitary code execution using java web start
6870531 	javawebstart 	other 	REGRESSION:have problem to run JNLP app and \ 
applets with signed Jar files

Other bug fixes are listed in the following table.
	BugId 	Category 	Subcategory 	Description 6842999 	hotspot 	runtime_system \ 
	Update hotspot windows os_win32 for windows 2008 R2
6804454 	java 	classes_2d 	RFE: Provide a way to control the printing dpi \ 
resolution from MSIE browser print. See also 6801859
6813208 	java 	classes_awt 	pageDialog throws NPE from applet
6825342 	java 	classes_awt 	Security warning may change Z-order of top-level
6843003 	java 	classes_lang 	Windows Server 2008 R2 system recognition
6860447 	java 	classes_security 	Add GlobalSign R3 Root certificate to the JDK
6872579 	java 	classes_security 	Add SECOM Root CA 2 to JDK
6880110 	java 	classes_util_i18n 	(tz) Support tzdata2009m
6814140 	java 	classes_util_logging 	deadlock due to synchronized demandLogger() \ 
code that locks ServerLogManager
6879614 	jaxp 	parse \ 
	com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderImpl failing to parse \ 
xml document
   2009-08-23 00:39:57 by David Brownlee | Files touched by this commit (3) | Package updated
Log message:
Updated lang/sun-jre6 to 6.0.16

Changes in 1.6.0_16 (6u16)

6u16 contains Olson time zone data version 2009i.

Bug Fixes

6862295 	hotspot 	jvmti 	JDWP threadid changes during debugging session (leading \ 
to ignored breakpoints)

Changes in 1.6.0_15 (6u15)

Root Certificates

Root Certificates are included in this release.

* Added one new root certificate and removed 3 root certificates from Entrust. \ 
(Refer to 6805338.)
* Added three new root certificates from Keynectis. (Refer to 6845457.)
* Added three new root certificates from Quovadis. (Refer to 6846473.)

Blacklist Entries

This update release includes the following new entry to the Blacklist:

* JNLPAppletLauncher (See Sun Alert 263490 .)

Note: Users should install JDK and JRE 6 Update 15 or later on systems running \ 
JDK and JRE 5.0 and SDK and JRE 1.4.2 to take advantage of this blacklist \ 
feature. For more information see the Blacklist Jar Feature section in the 6u14 \ 
Release Notes.

Debug Issue

Java ™ Virtual Machine Tool Interface (JVM TI) breakpoints are reliable \ 
only when either the Parallel Scavenge garbage collector (-XX:+UseParallelGC) or \ 
the Parallel Compacting garbage collector (-XX:+UseParallelOldGC) is used.

When other collectors are used, breakpoints may stop functioning, and JVM TI \ 
object tags may become unusable after a full GC operation is performed. Java \ 
™ Debug Interface (JDI) ThreadReferences have an embedded thread ID that \ 
depends on JVM TI object tags, thus the embedded thread ID may change \ 
unexpectedly. This may cause confusion in thread based JDI events.

Note that the Serial garbage collector (-XX:+UseSerialGC) is vulnerable to this \ 
problem and is selected by default on some platforms. The work around is to \ 
explicitly select the Parallel Scavenge collector using the command line option \ 
-XX:+UseParallelGC.

(Refer to 6862295.)
Bug Fixes

This release contains fixes for one or more security vulnerabilities. For more \ 
information, please see Sun Alerts 263408 , 263409 , 263428 , 263429 , 263488 , \ 
263489 , and 264648.

Bug fixes for vulnerabilities are listed in the following table.
BugId 	Category 	Subcategory 	Description 6656610 	java 	accessibility \ 
	AccessibleResourceBundle.getContents exposes mutable static (findbugs)
6656586 	java 	classes_awt 	Cursor.predefined is protected static mutable (findbugs)
6805231 	java 	classes_awt 	Security Warning Icon is missing in Windows 2000 \ 
Prof from Jdk build 6u12
6818787 	java 	classes_awt 	It is possible to reposition the security icon too \ 
far from the border of the window on X11
6823373 	java 	classes_awt 	[ZDI-CAN-460] Java Web Start JPEG header parsing \ 
needs more scruity
6660539 	java 	classes_beans 	Introspector cache mutable static
6777487 	java 	classes_beans 	Encoder allows reading private variables with \ 
certain names
6801071 	java 	classes_net 	Remote sites can compromise user privacy and \ 
possibly hijack web session
6801497 	java 	classes_net 	Proxy is assumed to be immutable but is non-final
6657695 	java 	classes_security 	AbstractSaslImpl.logger is a static mutable \ 
(findbugs)
6824440 	java 	classes_security 	XML Signature HMAC issue
6657625 	java 	classes_sound 	RmfFileReader/StandardMidiFileWriter.types are \ 
public mutable statics (findbugs)
6738524 	java 	classes_sound 	JDK13Services allows read access to system \ 
properties from untrusted code
6777448 	java 	classes_sound 	JDK13Services.getProviders creates instances with \ 
full privileges
6588003 	java 	classes_swing 	LayoutQueue mutable statics
6660049 	java 	classes_swing 	Synth Region.uiToRegionMap/lowerCaseNameMap are \ 
mutable statics
6849518 	java 	classes_swing 	NPE is thrown in jemmy library since 6u15 b01 at \ 
javax.swing.plaf.synth.SynthContext.isSubregion()
6656625 	java 	imageio \ 
	ImageReaderSpi.STANDARD_INPUT_TYPE/ImageWriterSpi.STANDARD_OUTPUT_TYPE are \ 
mutable static (findbugs)
6657133 	java 	imageio 	Mutable statics in imageio plugins (findbugs)
6830335 	java 	jar 	Java JAR Pack200 Decompression Integer Overflow Vulnerability
6755840 	java_plugin 	plugin 	Version selection allows old zip and certificate \ 
handling to be exploited
6848964 	javawebstart 	general 	TCK jnlp test \ 
jnlp_file/appletDesc/index.html#misc fails with NPE starting 6u15 b01
6862844 	javawebstart 	other 	java web start ActiveX control security problem \ 
caused by ATL PROP_ENTRY macro
6845701 	jaxp 	parse 	Xerces2 Java XML library infinite loop with malformed XML input
6813167 	jax-ws 	other 	6u14 JAX-WS audit mutable static bugs
6736293 	jmx 	classes 	OpenType checks can be bypassed through finalizer resurrection
6657619 	jndi 	dns 	DnsContext.debug is public static mutable (findbugs)

Other bug fixes are listed in the following table.
BugId 	Category 	Subcategory 	Description 6786503 	hotspot 	garbage_collector \ 
	Overflow list performance can be improved
6787254 	hotspot 	garbage_collector 	Work queue capacity can be increased \ 
substantially on some platforms
6805338 	java 	classes_security 	Add 1 new Entrust root CA cert and remove 3 \ 
others with 1024 bit keys
6845457 	java 	classes_security 	Add root certs for Keynectis CA
6846473 	java 	classes_security 	Add QuoVadis root CA certs to the JRE
6848984 	java 	classes_util_i18n 	(tz) Support tzdata2009i
6851214 	java 	classes_util_i18n 	(tz) New Jordan rule creates a failure for \ 
SimpleTimeZone parsing post tzdata2009h
6845077 	java 	install 	silent JDK should install JRE/Java DB silently
6846531 	javawebstart 	other 	REGRESSION application from ocie.net does not work \ 
with 6.0_14
6461727 	jce 	pkcs11_csp 	TripleDES KeyGenerators in SunPKCS11 and SunJCE do not \ 
agree on key length
   2009-06-14 22:34:16 by Joerg Sonnenberger | Files touched by this commit (29)
Log message:
Replace @exec/@unexec with @pkgdir or drop it.
   2009-06-14 20:03:45 by Joerg Sonnenberger | Files touched by this commit (167)
Log message:
Remove @dirrm entries from PLISTs

Next | Query returned 79 messages, browsing 31 to 40 | Previous