| 1 | Key:
|
|---|
| 2 |
|
|---|
| 3 | SX - http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=X
|
|---|
| 4 | PRX - http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=X
|
|---|
| 5 | RHX - https://bugzilla.redhat.com/show_bug.cgi?id=X
|
|---|
| 6 | DX - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=X
|
|---|
| 7 | GX - http://bugs.gentoo.org/show_bug.cgi?id=X
|
|---|
| 8 |
|
|---|
| 9 | CVE-XXXX-YYYY: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=XXXX-YYYY
|
|---|
| 10 |
|
|---|
| 11 | New in release 1.1.2 (2011-08-31):
|
|---|
| 12 | * Plugin
|
|---|
| 13 | - PR749: sun.applet.PluginStreamHandler#handleMessage(String) really slow
|
|---|
| 14 | - RH718693: MindTerm SSH Applet doesn't work
|
|---|
| 15 | Common
|
|---|
| 16 | - PR768: Signed applets/Web Start apps don't work with OpenJDK7 and up
|
|---|
| 17 | - PR769: IcedTea-Web does not work with some ssl sites with OpenJDK7
|
|---|
| 18 | - RH734081: Javaws cannot use proxy settings from Firefox
|
|---|
| 19 |
|
|---|
| 20 | New in release 1.1.1 (2011-07-20):
|
|---|
| 21 | * Security updates:
|
|---|
| 22 | - RH718164, CVE-2011-2513: Home directory path disclosure to untrusted applications
|
|---|
| 23 | - RH718170, CVE-2011-2514: Java Web Start security warning dialog manipulation
|
|---|
| 24 |
|
|---|
| 25 | New in release 1.1 (2011-06-08):
|
|---|
| 26 | * New Features
|
|---|
| 27 | - IcedTea-Web now installs to a FHS-compliant location
|
|---|
| 28 | - IcedTea-Web can now handle Proxy Auto Config files
|
|---|
| 29 | - Binary launchers replaced with simple shell scripts
|
|---|
| 30 | - Can now use codebase_lookup=false with applets.
|
|---|
| 31 | * Common Fixes and Improvements
|
|---|
| 32 | - PR497: Mercurial revision detection not very reliable
|
|---|
| 33 | - PR638: JNLPClassLoader.loadClass(String name) can return null
|
|---|
| 34 | - RH677772: NoSuchAlgorithmException using SSL/TLS in javaws
|
|---|
| 35 | - PR724: Possible NullPointerException in JNLPClassLoader.getClassPathsFromManifest
|
|---|
| 36 | * NetX
|
|---|
| 37 | - Use Firefox's proxy settings if possible
|
|---|
| 38 | - The user's default browser (determined from xdg-open or $BROWSER) is used
|
|---|
| 39 | - RH669942: javaws fails to download version/packed files (missing support for jnlp.packEnabled and jnlp.versionEnabled)
|
|---|
| 40 | - PR658: now jnlp.packEnabled works with applets.
|
|---|
| 41 | - PR726: closing javaws -about no longer throws exceptions.
|
|---|
| 42 | - PR727: cache now properly removes files.
|
|---|
| 43 | * Plugin
|
|---|
| 44 | - PR475, RH604061: Allow applets from the same page to use the same classloader
|
|---|
| 45 | - PR612: NetDania application ends on java.security.AccessControlException: access denied (java.util.PropertyPermission browser read)
|
|---|
| 46 | - PR664: Sound doesn't play on runescape.com.
|
|---|
| 47 | - PR721: IcedTeaPlugin.so cannot run g_main_context_iteration on a different thread unless a different GMainContext *context is used
|
|---|
| 48 | - PR735: Firefox 4 sometimes freezes if the applet calls showDocument()
|
|---|
| 49 |
|
|---|
| 50 | New in release 1.0 (2010-XX-XX):
|
|---|
| 51 |
|
|---|
| 52 | * Initial release of IcedTea-Web
|
|---|
| 53 | * Security updates
|
|---|
| 54 | - RH645843, CVE-2010-3860: IcedTea System property information leak via public static
|
|---|
| 55 | - RH672262, CVE-2011-0025: IcedTea jarfile signature verification bypass
|
|---|
| 56 | * Plugin
|
|---|
| 57 | - PR542: Plugin fails with NPE on http://www.openprocessing.org/visuals/iframe.php?visualID=2615
|
|---|
| 58 | - PR552: Support for FreeBSD's pthread implementation
|
|---|
| 59 | - PR554: System.err writes content two times
|
|---|
| 60 | - PR556: Applet initialization code is prone to race conditions
|
|---|
| 61 | - PR557: Applet opens in a separate window if tab is closed when the applet loads
|
|---|
| 62 | - PR565: UIDefaults.getUI fails with jgoodies:looks 2.3.1
|
|---|
| 63 | - PR593: Increment of invalidated iterator in IcedTeaPluginUtils (patch from barbara.xxx1975@libero.it)
|
|---|
| 64 | - PR597: Entities are parsed incorrectly in PARAM tag in applet plugin
|
|---|
| 65 | - PR619: Improper finalization by the plugin can crash the browser
|
|---|
| 66 | - Applets are now double-buffered to eliminate flicker in ones that do heavy drawing
|
|---|
| 67 | - RH665104: OpenJDK Firefox Java plugin loses a cookie
|
|---|
| 68 | * NetX
|
|---|
| 69 | - Add a new option -Xclearcache
|
|---|
| 70 | - Interfaces javax.jnlp.IntegrationService and javax.jnlp.DownloadService2 are now available
|
|---|
| 71 | - PR592: NetX can create invalid desktop entry files
|
|---|
| 72 | - RH663680, CVE-2010-4351: IcedTea JNLP SecurityManager bypass
|
|---|
| 73 | * Control Panel
|
|---|
| 74 | - Modifications to deployments.properties file can now be done through a GUI
|
|---|
