We have a new release of IcedTea (http://bitly.com/it11310) and a new OpenJDK 6 release, b38, to go with it. This is made from the current state of the OpenJDK 6 repositories plus backports of the new security fixes included in 7u95 & 8u71.
The tarballs are available here: https://java.net/projects/openjdk6/downloads/download/openjdk-6-src-b38-20_jan_2016.tar.gz https://java.net/projects/openjdk6/downloads/download/openjdk-6-src-b38-20_jan_2016.tar.xz SHA256 checksums: b74c2cf9087e05084c46c324b7d9c22d412fbb6e21beb6b92dee4345789257b9 openjdk-6-src-b38-20_jan_2016.tar.gz ff88dbcbda6c3c7d80b7cbd28065a455cdb009de9874fcf9ff9ca8205d38a257 openjdk-6-src-b38-20_jan_2016.tar.xz Changes since b38 (including both CPU fixes and upstreamed changes): * Security fixes - S8059054, CVE-2016-0402: Better URL processing - S8130710, CVE-2016-0448: Better attributes processing - S8133962, CVE-2016-0466: More general limits - S8137060: JMX memory management improvements - S8139012: Better font substitutions - S8139017, CVE-2016-0483: More stable image decoding - S8140543, CVE-2016-0494: Arrange font actions - S8143185: Cleanup for handling proxies - S8143941, CVE-2015-8126, CVE-2015-8472: Update splashscreen displays * Other changes - OJ69: Windows build broken after b37 changes [already in repo] - OJ70: Allow versions of ALSA >= 1.1.0 - S6720721: CRL check with circular depency support needed - S6852744: PIT b61: PKI test suite fails because self signed certificates are being rejected [Tests only] - S7166570: JSSE certificate validation has started to fail for certificate chains - S7167988: PKIX CertPathBuilder in reverse mode doesn't work if more than one trust anchor is specified - S7171223: Building ExtensionSubtables.cpp should use -fno-strict-aliasing - S8068761: [TEST_BUG] java/nio/channels/ServerSocketChannel/AdaptServerSocket.java failed with SocketTimeoutException - S8074068: Cleanup in src/share/classes/sun/security/x509/ - S8075773: jps running as root fails after the fix of JDK-8050807 - S8081297: SSL Problem with Tomcat - S8134605: Partial rework of the fix for 8081297 - S8135307: CompletionFailure thrown when calling FieldDoc.type, if the field's type is missing - S8138716: (tz) Support tzdata2015g - S8141213: [Parfait]Potentially blocking function GetArrayLength called in JNI critical region at line 239 of jdk/src/share/native/sun/awt/image/jpeg/jpegdecoder.c in function GET_ARRAYS - S8141287: Add MD5 to jdk.certpath.disabledAlgorithms - Take 2 - S8142928: [TEST_BUG] sun/security/provider/certpath/ReverseBuilder/ReverseBuild.java 8u71 failure - S8144955: Wrong changes were pushed with 8143942 - S8145551: Test failed with Crash for Improved font lookups - S8147466: Add -fno-strict-overflow to IndicRearrangementProcessor{,2}.cpp Webrevs for the new changes: http://cr.openjdk.java.net/~andrew/openjdk6/20160119/root/ http://cr.openjdk.java.net/~andrew/openjdk6/20160119/corba/ http://cr.openjdk.java.net/~andrew/openjdk6/20160119/jaxp/ http://cr.openjdk.java.net/~andrew/openjdk6/20160119/jaxws/ http://cr.openjdk.java.net/~andrew/openjdk6/20160119/hotspot/ http://cr.openjdk.java.net/~andrew/openjdk6/20160119/jdk/ http://cr.openjdk.java.net/~andrew/openjdk6/20160119/langtools/ Once approved, I'll push these to the OpenJDK 6 repository. Thanks, -- Andrew :) Senior Free Java Software Engineer Red Hat, Inc. (http://www.redhat.com) PGP Key: ed25519/35964222 (hkp://keys.gnupg.net) Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222
