The latest security update has now been available for over two weeks: http://blog.fuseyism.com/index.php/2013/04/17/security-icedtea-1-11-10-for-openjdk-6-released/
and nothing as yet has been pushed upstream to OpenJDK 6. As a start, this webrev: http://cr.openjdk.java.net/~andrew/openjdk6/jaxp_drop/webrev.01/ reincludes the JAXP source code in the main source code repositories, which was removed in favour of binary zip files by Oracle some time ago. This will allow us to patch this code in a clear and transparent manner for this security update and any subsequent ones. All the patch is, in essence, is the extraction of jaxp144_05.zip into the drop_included/jaxp_src subdirectory of the JAXP repository so it will be picked up by the build without the need to download the separate zip file. The only other change is to remove drop_included from .hgignore. There are no build system changes. Ok for OpenJDK 6? -- Andrew :) Free Java Software Engineer Red Hat, Inc. (http://www.redhat.com) PGP Key: 248BDC07 (https://keys.indymedia.org/) Fingerprint = EC5A 1F5E C0AD 1D15 8F1F 8F91 3B96 A578 248B DC07
