summaryrefslogtreecommitdiff
path: root/lang
diff options
context:
space:
mode:
authorabs <abs>2009-11-22 19:46:11 +0000
committerabs <abs>2009-11-22 19:46:11 +0000
commit07744350504d199ca4bc4e8b8fa780242f9bc583 (patch)
tree10cd03404f15609a0b20394c3d5c112c2392bb6b /lang
parent4021e2cb2caf0865d2fc87e91a61ce22e10a9096 (diff)
downloadpkgsrc-07744350504d199ca4bc4e8b8fa780242f9bc583.tar.gz
Updated lang/sun-jre15 to 5.0.22
Changes in 1.5.0_22 The full internal version number for this update release is 1.5.0_22-b03 (where "b" means "build"). The external version number is 5.0u22. OlsonData 2009m This release contains Olson time zone data version 2009m. For more information, refer to Timezone Data Versions in the JRE Software . Security Baseline This update release specifies the following security baseline: JRE Family Version Java SE Security Baseline Java SE for Business Security Baseline 1.4.2 1.4.2_19 1.4.2_24 In December, 2008, Java SE 1.4.2 reached its end of service life with the release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above) include the Access Only option and are available to Java SE for Business subscribers. For more information about the security baseline, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer . Root Certificates Root Certificates are included in this release. * Added one new root certificate for SECOM. (Refer to 6872579.) * Added one new root certificate for GlobalSign. (Refer to 6860447.) Bug Fixes This release contains fixes for one or more security vulnerabilities. For more information, please see Sun Alerts 269868, 270474, 270475, and 270476. Bug fixes for vulnerabilities are listed in the following table. BugId Category Subcategory Description 6631533 java classes_2d ICC_Profile allows detecting if some files exist 6815780 java classes_2d TrueType font parsing crash when stressing Sun Bug 6751322 test case 6822057 java classes_2d X11 and Win32GraphicsDevice don't clone arrays returned from getConfigurations() 6862969 java classes_2d JPEG JFIF Decoder issue 6862970 java classes_2d Image Color Profile parsing issue 6872357 java classes_2d JRE AWT setDifflCM vulnerable to Stack Overflow 6872358 java classes_2d JRE AWT setBytePixels vulnerable to Heap Overflow 6664512 java classes_awt Component and [Default]KeyboardFocusManager pass security sensitive objects to loggers 6636650 java classes_lang (cl) Resurrected ClassLoaders can still have children 6861062 java classes_security Disable MD2 in certificate chain validation 6863503 java classes_security SECURITY: MessageDigest.isEqual introduces timing attack vulnerabilities 6864911 java classes_security ASN.1/DER input stream parser needs more work 6854303 java classes_sound Sun Java HsbParser.getSoundBank Stack Buffer Overflow Vulnerability 6657026 java classes_swing Numerous static security flaws in Swing (findbugs) 6657138 java classes_swing Mutable statics in Windows PL&F (findbugs) 6824265 java classes_util_i18n (tz) TimeZone.getTimeZone allows probing local filesystem 6632445 java imageio DoS from parsing BMPs with UNC ICC links 6862968 java imageio JPEG Image Writer quantization problem 6874643 java imageio ImageI/O JPEG is vulnerable to Heap Overflow 6869694 java install java update malfunctioning Other bug fixes are listed in the following table. BugId Category Subcategory Description 6876061 java classes_awt Following JCK5 test not working as exp-d on linux: awt-interactive-ComponentTests 6860447 java classes_security Add GlobalSign R3 Root certificate to the JDK 6872579 java classes_security Add SECOM Root CA 2 to JDK 6880110 java classes_util_i18n (tz) Support tzdata2009m Changes in 1.5.0_21 The full internal version number for this update release is 1.5.0_21-b01 (where "b" means "build"). The external version number is 5.0u21. OlsonData 2009l This release contains Olson time zone data version 2009l. For more information, refer to Timezone Data Versions in the JRE Software . Security Baseline This update release specifies the following security baseline: JRE Family Version Java SE Security Baseline Java SE for Business Security Baseline 1.4.2 1.4.2_19 1.4.2_22 On October 30, 2008, Java SE 1.4.2 reached its end of service life with the release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above) include the Access Only option and are available to Java SE for Business subscribers. For more information about the security baseline, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer . Additional Supported System Configurations As of this update, support has been added for the following system configurations: * Windows Vista SP2 * Windows Server 2008 SP2 Refer to the Supported System Configurations page. Bug Fixes Bug fixes are listed in the following table. BugId Category Subcategory Description 6422099 hotspot compiler2 C2 assert("live value must not be garbage") 6445745 hotspot compiler2 TransformerManagementThreadAddTests.java fails an assertion 6772683 hotspot compiler2 Thread.isInterrupted() fails to return true on multiprocessor PC 6842999 hotspot runtime_system Update hotspot windows os_win32 for windows 2008 R2 6845161 jaas login Bottleneck in Configuration.getConfiguration synchronized call 6860491 java classes_awt WRAP_TIME_MILLIS incorrectly set 6843003 java classes_lang Windows Server 2008 R2 system recognition 6808046 java classes_swing Having image problems on Asian Languages display 6645292 java classes_text [Fmt-Da] Timezone Western Summer Time (Australia) is parsed incorrectly 6665028 java classes_text native code of method j*.text.Bidi.nativeBidiChars is using the contents of a primitive array direct 6872467 java classes_util_i18n (tz) Support tzdata2009l 6814140 java classes_util_logging deadlock due to synchronized demandLogger() code that locks ServerLogManager 6817482 java_plugin iexplorer On IE, modal JDialog from an Applet in html frame is not modal 6432317 java_plugin misc Vista: Java Plugin won't be able to launch extension installers. 6818278 javawebstart jnlp_file sunmc console when started with javaws does not communicate with the firewall port range 6748156 jndi ldap add an new JNDI property to control the boolean flag WaitForReply (JDK5) 6750362 jndi ldap Very large LDAP requests throw a OOM on LDAP servers which aren't aware of Paged Results Controls
Diffstat (limited to 'lang')
-rw-r--r--lang/sun-jre15/Makefile6
-rw-r--r--lang/sun-jre15/distinfo14
2 files changed, 10 insertions, 10 deletions
diff --git a/lang/sun-jre15/Makefile b/lang/sun-jre15/Makefile
index 2630ce76d58..d83e048c74d 100644
--- a/lang/sun-jre15/Makefile
+++ b/lang/sun-jre15/Makefile
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile,v 1.59 2009/08/20 08:46:40 obache Exp $
+# $NetBSD: Makefile,v 1.60 2009/11/22 19:46:11 abs Exp $
# Note: Regen distinfo with PKG_DEFAULT_OPTIONS+=sun-jre-jce
-DISTNAME= jre-1_5_0_20-linux-${DIST_ARCH}
-PKGNAME= sun-jre15-5.0.20
+DISTNAME= jre-1_5_0_22-linux-${DIST_ARCH}
+PKGNAME= sun-jre15-5.0.22
MASTER_SITES= # empty
LICENSE= sun-jre6-license
diff --git a/lang/sun-jre15/distinfo b/lang/sun-jre15/distinfo
index 0ef25f8b0e1..d1642cb4e03 100644
--- a/lang/sun-jre15/distinfo
+++ b/lang/sun-jre15/distinfo
@@ -1,11 +1,11 @@
-$NetBSD: distinfo,v 1.22 2009/08/20 08:46:40 obache Exp $
+$NetBSD: distinfo,v 1.23 2009/11/22 19:46:11 abs Exp $
SHA1 (jce_policy-1_5_0.zip) = f0e887b91b4499142285633e65c5710c3a133a16
RMD160 (jce_policy-1_5_0.zip) = eb12d0333c3ddbbba57a0e825a6891a75ec485c0
Size (jce_policy-1_5_0.zip) = 8826 bytes
-SHA1 (jre-1_5_0_20-linux-amd64.bin) = 29c4c8d026a6ea629ff26e78917a74bb4f3f2a73
-RMD160 (jre-1_5_0_20-linux-amd64.bin) = 15bb62c5d0d0bba312796efe5380df4cac3d6ba0
-Size (jre-1_5_0_20-linux-amd64.bin) = 16800390 bytes
-SHA1 (jre-1_5_0_20-linux-i586.bin) = 7f341a025588e05ab7c35fc1cdae7ca7a61c1b3a
-RMD160 (jre-1_5_0_20-linux-i586.bin) = 1431b39c0733b4e737b4e9a145118908344bf72f
-Size (jre-1_5_0_20-linux-i586.bin) = 17265677 bytes
+SHA1 (jre-1_5_0_22-linux-amd64.bin) = 9371ed7545d993667fb4297081e6659493a60889
+RMD160 (jre-1_5_0_22-linux-amd64.bin) = 37e139b6ba9b8f0f0d6c0b5a06ad2c10114811fb
+Size (jre-1_5_0_22-linux-amd64.bin) = 16846078 bytes
+SHA1 (jre-1_5_0_22-linux-i586.bin) = c54987430f8eab5aae72e04568d58ec6329ba677
+RMD160 (jre-1_5_0_22-linux-i586.bin) = f5d0f6270bfdec2c4cebaf346c861aca2c2db563
+Size (jre-1_5_0_22-linux-i586.bin) = 17283082 bytes