Changeset 429 for trunk/icedtea-web/NEWS

Timestamp:

Sep 24, 2014, 9:34:21 PM (11 years ago)

Author:

dmik

Message:

icedtea-web: Merge version 1.5.1 from vendor to trunk.

File:

• trunk/icedtea-web/NEWS (modified) (3 diffs)

trunk/icedtea-web/NEWS

@@ -9 +9 @@
 CVE-XXXX-YYYY: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=XXXX-YYYY
 
-New in release 1.3 (2012-09-04):
+New in release 1.5.1 (2014-08-13):
+* Massively improved offline abilities.
+* Improved to be able to run with any JDK
+* JDK 8 support added (URLPermission granted if applicable)
+* Added DE and PL localizations
+* Added KEY_ENABLE_MANIFEST_ATTRIBUTES_CHECK deployment property to control scan of Manifest file 
+* Control Panel
+  - PR1856: ControlPanel UI improvement for lower resolutions (800*600)
+* NetX
+  - PR1858: Java Console accepts multi-byte encodings
+  - PR1859: Java Console UI improvement for lower resolutions (800*600)
+  - RH1091563: [abrt] icedtea-web-1.5-2.fc20: Uncaught exception java.lang.ClassCastException in method sun.applet.PluginAppletViewer$8.run()
+* Plugin
+  - PR1743 - Intermittant deadlock in PluginRequestProcessor
+  - RH1121549: coverity defects
+* PolicyEditor
+  - codebases without permissions assigned save to file anyway (and re-appear on next open)
+  - PR1776: NullPointer on save-and-exit
+  - Custom permissions are properly formatted
+
+New in release 1.5 (2014-04-02):
+* IcedTea-Web now using tagsoup as default (tagsoup dependence) sanitizer for input
+* JDK older then 1.5 no longer supported
+* IcedTea-Web is now following XDG .config and .cache specification(RH947647)
+* A console for debugging plugin and javaws
+* Dialogs center on screen before becoming visible
+* Support for u45 and u51 new manifest attributes (Application-Name, Codebase, Permissions, Trusted-only)
+* Custom applet permission policies panel in itweb-settings control panel
+* javaws -version flag
+* New PolicyEditor for easily adding/removing permissions to individual applets
+* Cache Viewer
+  - Can be closed by ESC key
+  - Enabling and disabling of operational buttons is handled properly
+  - Time consuming operations are indicated by a mouse busy cursor
+  - "Size" and "Last Modified" columns display localized data
+* NetX
+  - PR1465 - java.io.FileNotFoundException while trying to download a JAR file
+  - Netx can now parse malformed jnlp files using tagsoup
+  - PR1026 - Apps fail to run because of the nanoxml parser's strict XML validation
+  - PR1473 - javaws should not depend on name of local file
+  - Redesigned About dialogue layout and contents
+  - Console made aware of plugin messages
+* Plugin
+  - PR854: Resizing an applet several times causes 100% CPU load
+  - PR1271: icedtea-web does not handle 'javascript:'-protocol URLs
+  - RH976833: Multiple applets on one page cause deadlock
+  - Pipes moved into XDG_RUNTIME_DIR
+  - Added debug to file
+  - RH1010958: insecure temporary file use flaw in LiveConnect implementation
+* Common
+  - PR1474: Can't get javaws to use SOCKS proxy
+  - Man page for itweb-settings
+* Security Updates
+  - CVE-2012-4540, RH869040: Heap-based buffer overflow after triggering event attached to applet
+
+New in release 1.4 (2013-XX-XX):
+* Added cs localization
+* Added de localization
+* Added pl localization
+* Splash screen for javaws and plugin
+* Better error reporting for plugin via Error-splash-screen
+* All IcedTea-Web dialogues are centered to middle of active screen
+* Download indicator made compact for more then one jar
+* User can select its own JVM via itw-settings and deploy.properties.
+* Added extended applets security settings and dialogue
 * Security updates
+  - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path.
+  - CVE-2013-1927, RH884705: fixed gifar vulnerabilit
   - CVE-2012-3422, RH840592: Potential read from an uninitialized memory location
   - CVE-2012-3423, RH841345: Incorrect handling of not 0-terminated strings
+* NetX
+  - PR1027: DownloadService is not supported by IcedTea-Web
+  - PR725: JNLP applications will prompt for creating desktop shortcuts every time they are run
+  - PR1292: Javaws does not resolve versioned jar names with periods correctly
+* Plugin
+  - PR1106: Buffer overflow in plugin table-
+  - PR1166: Embedded JNLP File is not supported in applet tag
+  - PR1217: Add command line arguments for plugins
+  - PR1189: Icedtea-plugin requires code attribute when using jnlp_href
+  - PR1198: JSObject is not passed to javascript correctly
+  - PR1260: IcedTea-Web should not rely on GTK
+  - PR1157: Applets can hang browser after fatal exception
+  - PR580: http://www.horaoficial.cl/ loads improperly
+* Common
+  - PR1049: Extension jnlp's signed jar with the content of only META-INF/* is considered
+  - PR955: regression: SweetHome3D fails to run
+  - PR1145: IcedTea-Web can cause ClassCircularityError
+  - PR1161: X509VariableTrustManager does not work correctly with OpenJDK7
+  - PR822: Applets fail to load if jars have different signers
+  - PR1186: System.getProperty("deployment.user.security.trusted.cacerts") is null
+  - PR909: The Java applet at http://de.gosupermodel.com/games/wardrobegame.jsp fails
+  - PR1299: WebStart doesn't read socket proxy settings from firefox correctly
+
+New in release 1.3 (2012-XX-XX):
 * NetX
   - PR898: signed applications with big jnlp-file doesn't start (webstart affect like "frozen")
@@ -25 +115 @@
   - PR855: AppletStub getDocumentBase() doesn't return full URL
   - PR1011: Folders treated as jar files in archive tag
-  - PR1106: Buffer overflow in plugin table
-  - PR975: Plugin should not include classpaths specified in jar manifests when using jnlp_href
   - PR588: Cookies not written from cookie jar to browser cookies
+  - PR920: Classes attempted to load twice when class extends from outside jar
 * Common
   - PR918: java applet windows uses a low resulution black/white icon
@@ -33 +122 @@
   - RH838559: Disambiguate signed applet security prompt from certificate warning
   - RH720836: project can be compiled against GTK+ 2 or 3 librarie
-  - PR955: regression: SweetHome3D fails to run
 
 New in release 1.2 (2011-XX-XX):