bae [Wed, 17 Feb 2010 13:10:26 +0300] rev 5188
6914823: Java AWT Library Invalid Index Vulnerability
Reviewed-by: flar, hawtin
bae [Wed, 17 Feb 2010 12:49:41 +0300] rev 5187
6914866: Sun JRE ImagingLib arbitrary code execution vulnerability
Reviewed-by: prr, hawtin
michaelm [Tue, 12 Jan 2010 12:13:48 +0000] rev 5186
6910590: Application can modify command array, in ProcessBuilder
Summary: clone array returned by List.toArray()
Reviewed-by: chegar, alanb
malenkov [Tue, 22 Dec 2009 17:56:58 +0300] rev 5185
6904691: Java Applet Trusted Methods Chaining Privilege Escalation Vulnerability
Reviewed-by: hawtin, peterz
mullan [Fri, 18 Dec 2009 09:09:12 -0500] rev 5184
6904162: Add new VeriSign root CA certificates to JRE and remove some old/unused ones
Reviewed-by: asaha
mullan [Tue, 08 Dec 2009 15:58:49 -0500] rev 5183
6633872: Policy/PolicyFile leak dynamic ProtectionDomains.
Reviewed-by: hawtin
xuelei [Mon, 07 Dec 2009 21:16:41 -0800] rev 5182
6898739: TLS renegotiation issue
Summary: the interim fix disables TLS/SSL renegotiation
Reviewed-by: mullan, chegar, wetmore
asaha [Fri, 04 Dec 2009 10:23:07 -0800] rev 5181
Merge
michaelm [Wed, 02 Dec 2009 12:17:42 +0000] rev 5180
6893954: Subclasses of InetAddress may incorrectly interpret network addresses
Summary: runtime type checks and deserialization check
Reviewed-by: chegar, alanb, jccollet
asaha [Tue, 01 Dec 2009 08:55:15 -0800] rev 5179
Merge
asaha [Thu, 26 Nov 2009 07:17:08 -0800] rev 5178
Merge
mchung [Wed, 25 Nov 2009 16:02:08 -0800] rev 5177
Merge
mchung [Wed, 25 Nov 2009 11:19:32 -0800] rev 5176
Merge
mchung [Wed, 25 Nov 2009 09:09:04 -0800] rev 5175
6893947: Deserialization of RMIConnectionImpl objects should enforce stricter checks [ZDI-CAN-588]
Summary: narrow the doPrivileged block to only set context ClassLoader
Reviewed-by: hawtin, emcmanus
sherman [Wed, 25 Nov 2009 12:51:00 -0800] rev 5174
6904925: Changeset for 6745393 for jdk7 ssr forest was incomplete
Summary: To add, commit and push back the ZStreamRef.java
Reviewed-by: alanb