Commit graph

5 commits

Author SHA1 Message Date
Jung-uk Kim
b714a769f1 - Fix multiple security vulnerabilities. [1]
- Drop version suffixes from LIB_DEPENDS.
- Use the new options framework.

Obtained from:	IcedTea Project [1]
http://icedtea.classpath.org/hg/icedtea6/rev/9aff0fc60733
2012-06-13 19:17:00 +00:00
Greg Lewis
923815253b . Update to build 25. 2012-05-09 03:53:37 +00:00
Jung-uk Kim
04111c28a5 Fix multiple security vulnerabilities.
CVE-2011-3563:	Fix issues in java sound
CVE-2011-3571:	Fix in AtomicReferenceArray
CVE-2011-5035:	Add property to limit number of request headers to the HTTP Server
CVE-2012-0501:	Better input parameter checking in zip file processing
CVE-2012-0502:	Issues with some KeyboardFocusManager method
CVE-2012-0503:	Issues with TimeZone class
CVE-2012-0505:	Enhance exception throwing mechanism in ObjectStreamClass
CVE-2012-0506:	Issues with some method in corba

Obtained from:	IcedTea Project
2012-02-18 01:06:58 +00:00
Jung-uk Kim
7027d395cb Update to build 22. 2011-03-01 19:21:59 +00:00
Jung-uk Kim
b6945850a4 Update IcedTea-Web to 1.0.1 and fix multiple security vulnerabilities.
CVE-2010-4469:	Hotspot backward jsr heap corruption
CVE-2010-4465:	Swing timer-based security manager bypass
CVE-2010-4472:	Untrusted code allowed to replace DSIG/C14N implementation
CVE-2010-4448:	DNS cache poisoning by untrusted applets
CVE-2010-4450:	Launcher incorrect processing of empty library path entries
CVE-2010-4471:	Java2D font-related system property leak
CVE-2010-4470:	JAXP untrusted component state manipulation
CVE-2011-0706:	Multiple signers privilege escalation

Obtained from:	icedtea.classpath.org
Obtained from:	jaxp.java.net
2011-02-21 19:03:18 +00:00