Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fix multiple security vulnerabilities. | Jung-uk Kim | 2012-02-18 | 1 | -0/+785 |
| | | | | | | | | | | | | | | | | CVE-2011-3563: Fix issues in java sound CVE-2011-3571: Fix in AtomicReferenceArray CVE-2011-5035: Add property to limit number of request headers to the HTTP Server CVE-2012-0501: Better input parameter checking in zip file processing CVE-2012-0502: Issues with some KeyboardFocusManager method CVE-2012-0503: Issues with TimeZone class CVE-2012-0505: Enhance exception throwing mechanism in ObjectStreamClass CVE-2012-0506: Issues with some method in corba Obtained from: IcedTea Project Notes: svn path=/head/; revision=291651 | ||||
* | Update to build 22. | Jung-uk Kim | 2011-03-01 | 1 | -1665/+0 |
| | | | | Notes: svn path=/head/; revision=270073 | ||||
* | Update IcedTea-Web to 1.0.1 and fix multiple security vulnerabilities. | Jung-uk Kim | 2011-02-21 | 1 | -0/+1665 |
CVE-2010-4469: Hotspot backward jsr heap corruption CVE-2010-4465: Swing timer-based security manager bypass CVE-2010-4472: Untrusted code allowed to replace DSIG/C14N implementation CVE-2010-4448: DNS cache poisoning by untrusted applets CVE-2010-4450: Launcher incorrect processing of empty library path entries CVE-2010-4471: Java2D font-related system property leak CVE-2010-4470: JAXP untrusted component state manipulation CVE-2011-0706: Multiple signers privilege escalation Obtained from: icedtea.classpath.org Obtained from: jaxp.java.net Notes: svn path=/head/; revision=269450 |