lp:debian/openjdk-7

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

36. By Matthias Klose on 2013-01-16

* IcedTea7 2.1.4 release.
* Security fixes
  - S8004933, CVE-2012-3174: Improve MethodHandle interaction with libraries
  - S8006017, CVE-2013-0422: Improve lookup resolutions
  - S8006125: Update MethodHandles library interactions
* Loosen OpenGL dependency. Closes: #695028.
* Fix error parsing drop files parameter from pcmanfm (Alberto Fernández
  Martínez). Closes: #695992.

35. By Matthias Klose on 2012-10-17

* IcedTea7 2.1.3 release.
* Security fixes
  - S6631398, CVE-2012-3216: FilePermission improved path checking.
  - S7093490: adjust package access in rmiregistry.
  - S7143535, CVE-2012-5068: ScriptEngine corrected permissions.
  - S7158796, CVE-2012-5070: Tighten properties checking in EnvHelp.
  - S7158807: Revise stack management with volatile call sites.
  - S7163198, CVE-2012-5076: Tightened package accessibility.
  - S7167656, CVE-2012-5077: Multiple Seeders are being created.
  - S7169884, CVE-2012-5073: LogManager checks do not work correctly for
    sub-types.
  - S7169887, CVE-2012-5074: Tightened package accessibility.
  - S7169888, CVE-2012-5075: Narrowing resource definitions in JMX RMI
    connector.
  - S7172522, CVE-2012-5072: Improve DomainCombiner checking.
  - S7186286, CVE-2012-5081: TLS implementation to better adhere to RFC.
  - S7189103, CVE-2012-5069: Executors needs to maintain state.
  - S7189490: More improvements to DomainCombiner checking.
  - S7189567, CVE-2012-5085: java net obselete protocol.
  - S7192975, CVE-2012-5071: Issue with JMX reflection.
  - S7195194, CVE-2012-5084: Better data validation for Swing.
  - S7195549, CVE-2012-5087: Better bean object persistence.
  - S7195917, CVE-2012-5086: XMLDecoder parsing at close-time should be
    improved.
  - S7195919, CVE-2012-5979: (sl) ServiceLoader can throw CCE without
    needing to create instance.
  - S7196190, CVE-2012-5088: Improve method of handling MethodHandles.
  - S7198296, CVE-2012-5089: Refactor classloader usage.
  - S7158801: Improve VM CompileOnly option.
  - S7158804: Improve config file parsing.
  - S7198606, CVE-2012-4416: Improve VM optimization.
* Backports
  - S7175845: "jar uf" changes file permissions unexpectedly.
  - S7177216: native2ascii changes file permissions of input file.
  - S7106773: 512 bits RSA key cannot work with SHA384 and SHA512.
  - S7158800: Improve storage of symbol tables.

34. By Matthias Klose on 2012-09-04

Pass -avoid-version to libtool to create a JamVM libjvm.so without SONAME
version numbers to match the Hotspot Server/Client libjvm.so. LP: #850433.

33. By Matthias Klose on 2012-09-03

* IcedTea7 2.1.2 release.
* Security fixes
  - CVE-2012-4681, S7162473: Reintroduce PackageAccessible checks removed
    in 6788531.
  - S7162476, CVE-2012-1682: XMLDecoder security issue via ClassFinder.
  - S7194567, CVE-2012-3136: Improve long term persistence of java.beans
    objects.
  - S7163201, CVE-2012-0547: Simplify toolkit internals references.
* d/p/hotspot-sparc.diff: Remove, integrated upstream.
* Stop running the mauve tests.

32. By Damien Raude-Morvan on 2012-07-25

* d/rules: Ensure we don't remove -02 (default) when -03 is disabled
  (fix jamvm FTBFS on armhf without -02).
* d/patches/gcc-jdk-opt-O0.diff, d/patches/gcc-jdk-opt-O2.diff,
  d/patches/gcc-no-hardening.diff, d/patches/gcc-opt-O2.diff: removed.

31. By Damien Raude-Morvan on 2012-06-30

* d/rules: On Debian Wheezy/Sid bump Build-Depends on libnss3-dev
  (>= 2:3.13.4) and Depends on libnss3 (>= 2:3.13.4) (ie. with epoch).
  (Closes: #679465).
* d/control: Suggests icedtea-7-plugin instead of icedtea6-plugin
  (Closes: #680284).
* d/patches/7130140-MouseEvent-systemout.diff: Remove "MEvent. CASE!" from
  console output. (Closes: #679036).
* Disable -O3 compile: cause wrong Math.* computations.
  (Closes: #679292 and Closes: #678228).
* debian/patches/FreetypeFontScaler_getFontMetricsNative.diff:
  Fix "OpenJDK returns the text height greater than font size".
  (Closes: #657854)

30. By Damien Raude-Morvan on 2012-06-11

* New upstream release with security fixes (Closes: #677486):
  - S7079902, CVE-2012-1711: Refine CORBA data models
  - S7110720: Issue with vm config file loadingIssue with
    vm config file loading
  - S7143606, CVE-2012-1717: File.createTempFile should be improved
    for temporary files created by the platform.
  - S7143614, CVE-2012-1716: SynthLookAndFeel stability improvement
  - S7143617, CVE-2012-1713: Improve fontmanager layout lookup operations
  - S7143851, CVE-2012-1719: Improve IIOP stub and tie generation in RMIC
  - S7143872, CVE-2012-1718: Improve certificate extension processing
  - S7145239: Finetune package definition restriction
  - S7152811, CVE-2012-1723: Issues in client compiler
  - S7157609, CVE-2012-1724: Issues with loop
  - S7160677: missing else in fix for 7152811
  - S7160757, CVE-2012-1725: Problem with hotspot/runtime_classfile
  - S7165628, CVE-2012-1726: Issues with
    java.lang.invoke.MethodHandles.Lookup
* Patches merged upstream:
  - debian/patches/arm-thumb-fix.diff
  - debian/patches/gcc-4.7.diff

[ James Page ]
* Cherry picked patch from openjdk-6 to fix handling of
  ICC profiles (LP: #888123, #888129) (Closes: #676351).

[ Damien Raude-Morvan ]
* Move libgnome2-0, libgnomevfs2-0, libgconf2-4 from Depends of JRE package
  to Recommends (Closes: #661465).
* New jni_md_h_JNIEXPORT_visibility.patch to allow JNIEXPORT definition
  to work with -fvisibility=hidden. (Closes: #670896).

29. By Matthias Klose on 2012-05-03

* Don't mark the -demo package as Multi-Arch same. Closes: #670038.
* Build using gcc-4.4 on mips, mipsel.
* Build again with older gcj version on s390 (4.6).

28. By Matthias Klose on 2012-04-10

* Update from the IcedTea7-2.1 release branch (20110410).
* Install desktop files again, using the common /usr/bin/java
  interpreter name.
* Build-depend on libpng-dev for newer releases. Closes: #662452.
* Let dlopen handle finding the libpcsclite library. LP: #898689.
* Build-depend on fonts-ipafont-mincho, fixing a build failure in the
  fontconfig compiler (find out why it breaks ...).
* Build using gcc-4.7/gcj-4.7 for sid/wheezy, fix build failure.
* Remove `-icedtea' suffix from the release identification.
* Fix arm thumb build, update taken from IcedTea6.

27. By Damien Raude-Morvan on 2012-04-09

[ Matthias Klose ]
* Don't install the binary fontconfig file.

[ Damien Raude-Morvan ]
* Remove libxp-dev check in configure.ac, it's not needed anymore
  (Closes: #657260) and so drop build dependency on libxp-dev.
* Fix FTBFS with glib 2.32 by adding explicit dependency gthread-2.0.pc
  (Closes: #665666).
* Use libpng-dev instead of libpng12-dev for wheezy/sid (Closes: #662453).