20:59 jkim 

Update to build 26.

 

19:27 jkim 

- Update security patch to fix CVE-2012-0547 and CVE-2012-1682.
- Catch up with icedtea.classpath.org server changes for distfiles.

 

19:17 jkim 

- Fix multiple security vulnerabilities. [1]
- Drop version suffixes from LIB_DEPENDS.
- Use the new options framework.

Obtained from:  IcedTea Project [1]
http://icedtea.classpath.org/hg/icedtea6/rev/9aff0fc60733

03:53 glewis 

. Update to build 25.

01:06 jkim 

Fix multiple security vulnerabilities.

CVE-2011-3563:  Fix issues in java sound
CVE-2011-3571:  Fix in AtomicReferenceArray
CVE-2011-5035:  Add property to limit number of request headers to the HTTP
Server
CVE-2012-0501:  Better input parameter checking in zip file processing
CVE-2012-0502:  Issues with some KeyboardFocusManager method
CVE-2012-0503:  Issues with TimeZone class
CVE-2012-0505:  Enhance exception throwing mechanism in ObjectStreamClass
CVE-2012-0506:  Issues with some method in corba

Obtained from:  IcedTea Project

19:21 jkim 

Update to build 22.

19:03 jkim 

Update IcedTea-Web to 1.0.1 and fix multiple security vulnerabilities.

CVE-2010-4469:  Hotspot backward jsr heap corruption
CVE-2010-4465:  Swing timer-based security manager bypass
CVE-2010-4472:  Untrusted code allowed to replace DSIG/C14N implementation
CVE-2010-4448:  DNS cache poisoning by untrusted applets
CVE-2010-4450:  Launcher incorrect processing of empty library path entries
CVE-2010-4471:  Java2D font-related system property leak
CVE-2010-4470:  JAXP untrusted component state manipulation
CVE-2011-0706:  Multiple signers privilege escalation

Obtained from:  icedtea.classpath.org
Obtained from:  jaxp.java.net