lp://qastaging/ubuntu/lucid-security/icedtea-web

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

23. By Jamie Strandboge on 2013-04-17

[ Matthias Klose ]
* IcedTea-Web 1.2.3 release.
* Security Updates:
  - CVE-2013-1927: fixed gifar vulnerability.
  - CVE-2013-1926: Class-loader incorrectly shared for applets with same
    relative-path.
* Common:
  - PR1161: X509VariableTrustManager does not work correctly with OpenJDK7.
* NetX:
  - PR580: http://www.horaoficial.cl/ loads improperly.
* Plugin:
  - PR1157: Applets can hang browser after fatal exception.

[ Jamie Strandboge ]
* debian/rules: generate icedtea-plugin meta package
* debian/control.in: update icedtea-netx replace/conflicts to avoid
  javaws conflict with openjdk-6-jre
* debian/icedtea-netx.postinst.in: skip update-alternatives on
  openjdk-7 binaries if they don't exist
* Regenerate the control file.

22. By Jamie Strandboge on 2012-11-06

* SECURITY UPDATE: Fix denial of service in exception handling
  - debian/patches/icedtea-web-CVE-2012-4540.patch: adjust off by one in
    exception string storage in IcedTeaScriptablePluginObject.cc. Also fix
    two memory leaks.
  - CVE-2012-4540

21. By Steve Beattie on 2012-07-28

* SECURITY UPDATE: uninitialized pointer use flaw
  - debian/patches/icedtea-web-CVE-2012-3422.patch: check for empty
    instance_to_id_map hash and return error if so.
  - CVE-2012-3422
* SECURITY UPDATE: incorrect handling of non NULL terminated strings
  - debian/patches/icedtea-web-CVE-2012-3423.patch: ensure NPVariant
    NPStrings are NULL terminated.
  - CVE-2012-3423

20. By Steve Beattie on 2012-06-22

* Backport IcedTea-web 1.2 to lucid in conjunction with OpenJDK 6/
  IcedTea 1.11.3 backport
* debian/rules: generate icedtea-plugin meta package
* debian/control.in: update icedtea-netx replace/conflicts to avoid
  javaws conflict with openjdk-6-jre
* debian/icedtea-netx.postinst.in: skip update-alternatives on
  openjdk-7 binaries if they don't exist
* Regenerate the control file.

19. By Matthias Klose on 2011-04-20

Upload to experimental.

18. By Martin Pitt on 2011-04-19

Reapply xulrunner → firefox-dev change from 1.1~20110320-0ubuntu2, which
were overwritten in the previous upload.

17. By Matthias Klose on 2011-04-06

Fix typo in icedtea-netx postinst to install the javaws alternative.

16. By Chris Coulson on 2011-04-04

* Switch build-depends to firefox-dev for natty. xulrunner is
  being demoted from main (LP: #740815)
  - update debian/rules
  - update debian/control

15. By Matthias Klose on 2011-02-24

Update to hg 20110320.

14. By Matthias Klose on 2011-01-22

Update to hg 20110122.