commit 7c14deb500a7fc8a7d325c3d0d82d6d65f3b0d0b
Author: Jacek Konieczny <[email protected]>
Date: Tue Jul 28 11:44:09 2015 +0200
Version: 2.6.1
Security fixes:
S8043202, CVE-2015-2808: Prohibit RC4 cipher suites
S8067694, CVE-2015-2625: Improved certification checking
S8071715, CVE-2015-4760: Tune font layout engine
S8071731: Better scaling for C1
S8072490: Better font morphing redux
S8072887: Better font handling improvements
S8073334: Improved font substitutions
S8073773: Presume path preparedness
S8073894: Getting to the root of certificate chains
S8074330: Set font anchors more solidly
S8074335: Substitute for substitution formats
S8074865, CVE-2015-2601: General crypto resilience changes
S8074871: Adjust device table handling
S8075374, CVE-2015-4748: Responding to OCSP responses
S8075378, CVE-2015-4749: JNDI DnsClient Exception Handling
S8075738: Better multi-JVM sharing
S8075833, CVE-2015-2613: Straighter Elliptic Curves
S8075838: Method for typing MethodTypes
S8075853, CVE-2015-2621: Proxy for MBean proxies
S8076328, CVE-2015-4000: Enforce key exchange constraints
S8076376, CVE-2015-2628: Enhance IIOP operations
S8076397, CVE-2015-4731: Better MBean connections
S8076401, CVE-2015-2590: Serialize OIS data
S8076405, CVE-2015-4732: Improve serial serialization
S8076409, CVE-2015-4733: Reinforce RMI framework
S8077520, CVE-2015-2632: Morph tables into improved form
PR2487, CVE-2015-4000: Make jdk8 mode the default for
jdk.tls.ephemeralDHKeySize
icedtea7-libpath.patch | 8 ++++----
icedtea7.spec | 23 ++++++++++++-----------
2 files changed, 16 insertions(+), 15 deletions(-)
---
diff --git a/icedtea7.spec b/icedtea7.spec
index e9966e3..d38cc7c 100644
--- a/icedtea7.spec
+++ b/icedtea7.spec
@@ -26,31 +26,31 @@
# class data version seen with file(1) that this jvm is able to load
%define _classdataversion 51.0
# JDK/JRE version, as returned with `java -version`, '_' replaced with '.'
-%define _jdkversion 1.7.0.65
+%define _jdkversion 1.7.0.85
Summary: OpenJDK and GNU Classpath code
Summary(pl.UTF-8): Kod OpenJDK i GNU Classpath
Name: icedtea7
-Version: 2.5.5
+Version: 2.6.1
Release: 1
License: GPL v2
Group: Development/Languages/Java
Source0:
http://icedtea.wildebeest.org/download/source/icedtea-%{version}.tar.gz
-# Source0-md5: 2b639a72a976c0cdc743ab5e18bd2369
+# Source0-md5: efac44117a94b9d3278988959e336e05
Source1:
http://icedtea.wildebeest.org/download/drops/icedtea7/%{version}/openjdk.tar.bz2
-# Source1-md5: 6edc6aa04cb261ebc382d53e7072d946
+# Source1-md5: d330560d5e9f443aa0e26130ca111a3f
Source2:
http://icedtea.wildebeest.org/download/drops/icedtea7/%{version}/corba.tar.bz2
-# Source2-md5: 999fa486ab1eaddaba220c19d24d1b33
+# Source2-md5: 0de3ec4198c437e3cbc58420c65146e1
Source3:
http://icedtea.wildebeest.org/download/drops/icedtea7/%{version}/jaxp.tar.bz2
-# Source3-md5: 139a569cf9d78ae7354fd407750a6fe2
+# Source3-md5: 8fa2bf64a4c27fea33f5fa60df6bcce6
Source4:
http://icedtea.wildebeest.org/download/drops/icedtea7/%{version}/jaxws.tar.bz2
-# Source4-md5: 7bc5e8735d9db574caf1c658d248f69a
+# Source4-md5: ebb952f8d77498fd8e5f0a1f27e2a6a2
Source5:
http://icedtea.wildebeest.org/download/drops/icedtea7/%{version}/jdk.tar.bz2
-# Source5-md5: 81ee4210f1c4315af9069f8153a8e7a1
+# Source5-md5: e242c40b5d7f4cfa52a0071c2836ba34
Source6:
http://icedtea.wildebeest.org/download/drops/icedtea7/%{version}/langtools.tar.bz2
-# Source6-md5: 117ae9e846a00e287060035b930c299d
+# Source6-md5: 1bf69ee4265e49516283aa9126ceb80d
Source7:
http://icedtea.wildebeest.org/download/drops/icedtea7/%{version}/hotspot.tar.bz2
-# Source7-md5: 51b6547c4a27c4cf6a134dca0f59e3ae
+# Source7-md5: 1a2fae086d50fc1ad69b72b4cf5baa3a
Source10: make-cacerts.sh
# 0-99 patches for the IcedTea files
Patch0: %{name}-x32-ac.patch
@@ -82,6 +82,7 @@ BuildRequires: libffi-devel
BuildRequires: libgcj
BuildRequires: libjpeg-devel
BuildRequires: libpng-devel
+BuildRequires: libsctp-devel
BuildRequires: libstdc++-static
BuildRequires: lsb-release
%{?with_nss:BuildRequires: nss-devel >= 1:3.17.2-5}
@@ -808,6 +809,7 @@ rm -rf $RPM_BUILD_ROOT
%attr(755,root,root) %{jredir}/lib/%{jre_arch}/libjava.so
%attr(755,root,root) %{jredir}/lib/%{jre_arch}/libjavajpeg.so
%attr(755,root,root) %{jredir}/lib/%{jre_arch}/libjavalcms.so
+%attr(755,root,root) %{jredir}/lib/%{jre_arch}/libjavasctp.so
%attr(755,root,root) %{jredir}/lib/%{jre_arch}/libjava_crw_demo.so
%attr(755,root,root) %{jredir}/lib/%{jre_arch}/libjawt.so
%attr(755,root,root) %{jredir}/lib/%{jre_arch}/libjdwp.so
@@ -823,7 +825,6 @@ rm -rf $RPM_BUILD_ROOT
%ifnarch x32
%attr(755,root,root) %{jredir}/lib/%{jre_arch}/libsaproc.so
%endif
-%attr(755,root,root) %{jredir}/lib/%{jre_arch}/libsctp.so
%{?with_sunec:%attr(755,root,root) %{jredir}/lib/%{jre_arch}/libsunec.so}
%attr(755,root,root) %{jredir}/lib/%{jre_arch}/libunpack.so
%attr(755,root,root) %{jredir}/lib/%{jre_arch}/libverify.so
diff --git a/icedtea7-libpath.patch b/icedtea7-libpath.patch
index 62abdb9..89b46b6 100644
--- a/icedtea7-libpath.patch
+++ b/icedtea7-libpath.patch
@@ -1,9 +1,9 @@
---- openjdk/hotspot/src/os/linux/vm/os_linux.cpp.orig 2013-11-19
15:23:59.927135248 +0100
-+++ openjdk/hotspot/src/os/linux/vm/os_linux.cpp 2013-11-19
15:24:24.261540890 +0100
-@@ -389,9 +389,9 @@
+--- openjdk/hotspot/src/os/linux/vm/os_linux.cpp~ 2015-06-12
17:09:45.000000000 +0200
++++ openjdk/hotspot/src/os/linux/vm/os_linux.cpp 2015-07-28
10:30:57.000000000 +0200
+@@ -410,9 +410,9 @@
* 7: The default directories, normally /lib and /usr/lib.
*/
- #if defined(AMD64) || defined(_LP64) && (defined(SPARC) || defined(PPC) ||
defined(S390) || defined(AARCH64))
+ #if defined(AMD64) || defined(_LP64) && (defined(SPARC) || defined(PPC) ||
defined(S390) || defined(AARCH64)) || defined(BUILTIN_SIM)
-#define DEFAULT_LIBPATH "/usr/lib64:/lib64:/lib:/usr/lib"
+#define DEFAULT_LIBPATH "/usr/lib64/java:/usr/lib64:/lib64:/lib:/usr/lib"
#else
================================================================
---- gitweb:
http://git.pld-linux.org/gitweb.cgi/packages/icedtea7.git/commitdiff/7c14deb500a7fc8a7d325c3d0d82d6d65f3b0d0b
_______________________________________________
pld-cvs-commit mailing list
[email protected]
http://lists.pld-linux.org/mailman/listinfo/pld-cvs-commit
