Debian
icedtea-web package

Change log for icedtea-web package in Debian

1 → 57 of 57 results First • Previous • Next • Last
Published in bookworm-release
Published in sid-release 
icedtea-web (1.8.8-2) unstable; urgency=medium

  * Team upload.
  * Removed pack200 support to build with Java 17 (Closes: #1011532)
  * Standards-Version updated to 4.6.1
  * Updated the Homepage field

 -- Emmanuel Bourg <email address hidden>  Wed, 02 Nov 2022 10:52:30 +0100

Available diffs

Superseded in sid-release 
icedtea-web (1.8.8-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Refreshed the patches
  * Standards-Version updated to 4.6.0.1

 -- Emmanuel Bourg <email address hidden>  Thu, 05 May 2022 13:44:49 +0200
Published in bullseye-release
Superseded in sid-release 
icedtea-web (1.8.4-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
  * Standards-Version updated to 4.5.0
  * Switch to debhelper level 12

 -- Emmanuel Bourg <email address hidden>  Sun, 07 Jun 2020 22:58:41 +0200

Available diffs

Superseded in sid-release 
icedtea-web (1.8.3-2) unstable; urgency=medium

  * Team upload.
  * Use SOURCE_DATE_EPOCH for the timestamps in the documentation to make
    the package reproducible

 -- Emmanuel Bourg <email address hidden>  Thu, 12 Sep 2019 00:15:16 +0200
Superseded in sid-release 
icedtea-web (1.8.3-1) unstable; urgency=medium

  * Team upload.
  * New upstream release (Closes: #934319)
    - Fixes CVE-2019-10181: Unsigned code injection in a signed JAR file
    - Fixes CVE-2019-10182: Path traversal while processing <jar/> elements
      of JNLP files results in arbitrary file overwrite
    - Fixes CVE-2019-10185: Directory traversal in the nested jar
      auto-extraction leading to arbitrary file overwrite

 -- Emmanuel Bourg <email address hidden>  Fri, 09 Aug 2019 18:57:41 +0200
Superseded in sid-release 
icedtea-web (1.8.2-2) unstable; urgency=medium

  * Team upload.
  * Added a symlink restoring /usr/share/icedtea-web/netx.jar (Closes: #932604)

 -- Emmanuel Bourg <email address hidden>  Mon, 22 Jul 2019 01:21:27 +0200
Superseded in sid-release 
icedtea-web (1.8.2-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Refreshed the patches
    - Keep building the shell launchers
    - Set the new --with-itw-libs build flag
  * Track and download the new releases from GitHub
  * Standards-Version updated to 4.4.0

 -- Emmanuel Bourg <email address hidden>  Fri, 19 Jul 2019 00:09:27 +0200
Superseded in sid-release
Published in stretch-release 
icedtea-web (1.6.2-3.1+deb9u1) stretch; urgency=medium

  * Stop building the browser plugin, no longer works with Firefox 60

 -- Moritz Mühlenhoff <email address hidden>  Sat, 10 Nov 2018 23:32:09 +0100
Published in buster-release
Superseded in sid-release 
icedtea-web (1.7.2-2) unstable; urgency=medium

  * Team upload.
  * Fixed the installation of the CLI tools alternatives (Closes: #924706)
  * Improved the package description (Closes: #706306)

 -- Emmanuel Bourg <email address hidden>  Mon, 18 Mar 2019 00:57:12 +0100
Superseded in sid-release 
icedtea-web (1.7.2-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Refreshed the patches
  * Fixed the build failure with Java 11 (Closes: #912549)
  * Added the missing dependency on a Java runtime (Closes: #912464)
  * icedtea-netx now provides icedtea-netx-common (Closes: #911995)
  * Enabled the enhanced XML parser based on Tagsoup
  * Enabled Proxy Auto Config support with Rhino

 -- Emmanuel Bourg <email address hidden>  Fri, 15 Mar 2019 23:44:27 +0100
Superseded in sid-release 
icedtea-web (1.7.1-1) unstable; urgency=medium

  * Team upload.

  [ Vincent Privat ]
  * IcedTea-Web 1.7.1 release (Closes: #886109).
  * Build using default-jdk (Closes: #894360).
  * Add support for openjdk-10.
  * Drop support of browser plugin (deprecated technology).
  * Drop unneeded patches.
  * Fix lintian warnings.
  * Update the copyright file.

  [ Emmanuel Bourg ]
  * No longer integrate icedtea-web with a specific JDK
    (Closes: #743922, #642901, #712292)
  * Merged icedtea-netx-common into icedtea-netx (Closes: #798946)
  * Package transferred to the Java Team.
  * Removed Damien Raude-Morvan from the uploaders (Closes: #889448)
  * Fixed the detection of Java 10+ in the configure script
  * No longer generate debian/control from template files
  * Updated the .desktop files
  * Build with the DH sequencer
  * Use Breaks/Replaces instead of Conflicts/Replaces in debian/control
  * Standards-Version updated to 4.2.1
  * Switch to debhelper level 11
  * Use a secure URL in debian/watch

 -- Emmanuel Bourg <email address hidden>  Wed, 24 Oct 2018 14:42:28 +0200
Superseded in buster-release
Superseded in stretch-release
Superseded in sid-release 
icedtea-web (1.6.2-3.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Apply fix from Santiago Vila to fix "dpkg-buildpackage -A".
    (Closes: #831932)

 -- Adrian Bunk <email address hidden>  Sat, 14 Jan 2017 17:46:54 +0200
Published in wheezy-release 
icedtea-web (1.4-3~deb7u2) wheezy-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Add CVE-2013-4349.diff patch.
    CVE-2013-4349: Fix IcedTeaScriptableJavaObject::invoke off-by-one
    heap-based buffer overflow after triggering event attached to applets.
    (Closes: #723118)

 -- Salvatore Bonaccorso <email address hidden>  Wed, 02 Oct 2013 17:11:22 +0200
Published in jessie-release 
icedtea-web (1.5.3-1) jessie; urgency=medium

  * New upstream release, fixes CVE-2015-5235 and CVE-2015-5234

 -- Moritz Mühlenhoff <email address hidden>  Thu, 17 Mar 2016 15:01:35 +0100
Superseded in stretch-release
Superseded in sid-release 
icedtea-web (1.6.2-3) unstable; urgency=medium

  * icedtea-netx: Remove the alternative openjdk-7-jre dependency.
    Closes: #816451.

 -- Matthias Klose <email address hidden>  Sat, 16 Apr 2016 18:15:51 +0200
Superseded in sid-release 
icedtea-web (1.6.2-2) unstable; urgency=medium

  * Non-maintainer upload.
  * Don't try to handle alternatives for openjdk-7; we'll remove it anyway.
    Closes: #813887, #813906, #813941.

 -- Matthias Klose <email address hidden>  Sun, 07 Feb 2016 13:23:48 +0100
Superseded in sid-release 
icedtea-web (1.6.2-1) unstable; urgency=medium

  * IcedTea-Web 1.6.2 release.
  * Build using openjdk-8, stop building the plugin for openjdk-7.

 -- Matthias Klose <email address hidden>  Sat, 06 Feb 2016 09:25:32 +0100
Superseded in stretch-release
Superseded in sid-release 
icedtea-web (1.6.1-4) unstable; urgency=medium

  * Update to the tip of the 1.6 branch.
    - Apparently fixed running http://www.java.com/en/download/installed.jsp.
      Closes: #805608.
  * icedtea-netx: Don't ship any binaries in /usr/bin.

 -- Matthias Klose <email address hidden>  Thu, 28 Jan 2016 13:31:49 +0100
Superseded in sid-release 
icedtea-web (1.6.1-3) unstable; urgency=medium

  * icedtea-netx: Fix postinst script. Closes: #812854.

 -- Matthias Klose <email address hidden>  Wed, 27 Jan 2016 12:22:35 +0100
Superseded in sid-release 
icedtea-web (1.6.1-2) unstable; urgency=medium

  * Update the copyright file.
  * Fix quoting (building the docs).
  * Build only the english docs and man pages.
  * icedtea-8-plugin: Fix postinst script.

 -- Matthias Klose <email address hidden>  Wed, 27 Jan 2016 00:25:15 +0100
Superseded in sid-release 
icedtea-web (1.6.1-1) unstable; urgency=medium

  * IcedTea-Web 1.6.1 release.
    - CVE-2015-5234: applet URL sanitization issue
    - CVE-2015-5235: unsigned applet origin issue. Closes: #798467.
  * Build using npapi-sdk-dev. Closes: #754367.
  * Build a icedtea-8-plugin package.

 -- Matthias Klose <email address hidden>  Tue, 26 Jan 2016 13:55:17 +0100
Superseded in jessie-release 
icedtea-web (1.5-2+deb8u1) jessie; urgency=medium


  * Non-maintainer upload.
  * Fix alternatives handling in icedtea-netx.postinst.in
    (closes: #778631).

 -- Gilles Filippini <email address hidden>  Sun, 22 Mar 2015 18:22:24 +0100
Superseded in stretch-release
Superseded in sid-release 
icedtea-web (1.5.2-1.1) unstable; urgency=medium


  * Non-maintainer upload.
  * Fix alternatives handling in icedtea-netx.postinst.in
    (closes: #778631).

 -- Gilles Filippini <email address hidden>  Sun, 22 Mar 2015 08:55:55 +0100
Superseded in sid-release 
icedtea-web (1.5.2-1) unstable; urgency=medium


  * IcedTea-Web 1.5.2 release.

 -- Matthias Klose <email address hidden>  Fri, 28 Nov 2014 12:30:39 +0100
Superseded in sid-release 
icedtea-web (1.5.2~rc1-1) unstable; urgency=medium


  * IcedTea-Web 1.5.2 release candidate 1.
    - RH1095311, PR574 - Build fix for JDK9 (references class sun.misc.Ref
      removed in OpenJDK 9).
    - RH1154177 - decoded file needed from cache.
    - fixed NPE  in https dialog.
    - empty codebase behaves  as ".".
  * Remove the support for OpenJDK 8, breaks for OpenJDK 7, when 8 is not
    installed. Closes: #759226. LP: #1363785.

 -- Matthias Klose <email address hidden>  Fri, 21 Nov 2014 08:45:27 +0100
Superseded in sid-release 
icedtea-web (1.5.1-1) unstable; urgency=medium


  * IcedTea-Web 1.5.1 release.
  * Build for ppc64 and ppc64el.
  * Add build support for OpenJDK 8 (Emmanuel Bourg). Closes: #751173.

 -- Matthias Klose <email address hidden>  Thu, 21 Aug 2014 09:24:55 +0200
Superseded in jessie-release
Superseded in sid-release 
icedtea-web (1.5-2) unstable; urgency=medium


  * Build-depend on iceweasel-dev. Closes: #752838.
  * Stop building the icedtea-6-plugin package: Closes: #750640.

 -- Matthias Klose <email address hidden>  Mon, 30 Jun 2014 15:00:58 +0200
Superseded in jessie-release
Superseded in sid-release 
icedtea-web (1.5-1) sid; urgency=medium


  * IcedTea-Web 1.5 release.
  * Build using dh-autoreconf.

 -- Matthias Klose <email address hidden>  Mon, 07 Apr 2014 17:38:58 +0200
Superseded in jessie-release
Superseded in sid-release 
icedtea-web (1.4.2-1) unstable; urgency=high


  * IcedTea-Web 1.4.2 release.
    - Security Updates- CVE-2012-4540: Heap-based buffer overflow after
      triggering event.

 -- Matthias Klose <email address hidden>  Wed, 05 Feb 2014 21:11:35 +0100
Superseded in sid-release 
icedtea-web (1.4.1-1) unstable; urgency=low


  * IcedTea-Web 1.4.1 release.
  * Build for AArch64.
  * Don't build icedtea-6-plugin on KFreeBSD.

 -- Matthias Klose <email address hidden>  Sat, 19 Oct 2013 17:20:43 +0200
Superseded in sid-release 
icedtea-web (1.4-3.1) unstable; urgency=low


  * Non-maintainer upload.
  * Add CVE-2013-4349.diff patch.
    CVE-2013-4349: Fix IcedTeaScriptableJavaObject::invoke off-by-one
    heap-based buffer overflow after triggering event attached to applets.
    (Closes: #723118)

 -- Salvatore Bonaccorso <email address hidden>  Sat, 28 Sep 2013 10:00:03 +0200
Superseded in sid-release 
icedtea-web (1.4-3) unstable; urgency=low


  * Update from the 1.4 branch:
    - Fix PR1465, java.io.FileNotFoundException while trying to download
      a JAR file.
    - Fix PR1473, javaws should not depend on name of local file.
    - Fix PR854, resizing an applet several times causes 100% CPU load.
      Closes: #707729.

 -- Matthias Klose <email address hidden>  Thu, 04 Jul 2013 11:01:08 +0200
Superseded in sid-release 
icedtea-web (1.4-2) unstable; urgency=low


  * Fix icedtea-web for use with OpenJDK 7u25.

 -- Matthias Klose <email address hidden>  Wed, 03 Jul 2013 17:34:23 +0200
Superseded in sid-release 
icedtea-web (1.4-1) unstable; urgency=low


  * IcedTea-Web 1.4 release.
  * Stop building the icedtea6-plugin transitional package.

 -- Matthias Klose <email address hidden>  Thu, 09 May 2013 18:26:47 +0200
Superseded in jessie-release
Superseded in wheezy-release
Superseded in sid-release 
icedtea-web (1.3.2-1) unstable; urgency=high


  * IcedTea-Web 1.3.2 release.
  * Security Updates:
    - CVE-2013-1927: fixed gifar vulnerability.
    - CVE-2013-1926: Class-loader incorrectly shared for applets with same
      relative-path.
  * Common:
    - Added new option in itw-settings which allows users to set JVM arguments
      when plugin is initialized.
  * NetX:
    - PR580: http://www.horaoficial.cl/ loads improperly.
  * Plugin:
    - PR1260: IcedTea-Web should not rely on GTK.
    - PR1157: Applets can hang browser after fatal exception.
  * Refresh patches.

 -- Matthias Klose <email address hidden>  Wed, 17 Apr 2013 00:45:29 +0200
Superseded in wheezy-release
Superseded in sid-release 
icedtea-web (1.3.1-3) unstable; urgency=low


  * Team upload.
  * Remove mips and mipsel from architectures.  (Closes: #701091)

 -- Niels Thykier <email address hidden>  Thu, 21 Feb 2013 21:30:08 +0100
Superseded in wheezy-release
Superseded in sid-release 
icedtea-web (1.3.1-2.1) unstable; urgency=low


  * Non-maintainer upload.
  * Don't forget to remove the itweb-settings alternative.  (Closes: #668444)

 -- Andreas Beckmann <email address hidden>  Sat, 02 Feb 2013 13:09:09 +0100
Superseded in wheezy-release
Superseded in sid-release 
icedtea-web (1.3.1-2) unstable; urgency=low


  * Team upload.
  * Rebuild with Java7 as "default" to fix the Java7 variant of
    the Java plugin.  Thanks to Bálint Réczey for the report.
    (Closes: #693623)

 -- Niels Thykier <email address hidden>  Thu, 20 Dec 2012 16:06:38 +0100
Superseded in wheezy-release
Superseded in sid-release 
icedtea-web (1.3.1-1) unstable; urgency=high


  * IcedTea-Web 1.3.1 release.
  * Security Updates
    - CVE-2012-4540: Heap-based buffer overflow after triggering event
      attached to applet.
  * Common
    - PR1161: X509VariableTrustManager does not work correctly with OpenJDK7.

 -- Matthias Klose <email address hidden>  Thu, 08 Nov 2012 12:39:11 +0100
Superseded in wheezy-release
Superseded in sid-release 
icedtea-web (1.3-2) unstable; urgency=high


  * Configure with --disable-docs (the developer docs aren't shipped
    anyway). Works around the build failure on s390.

 -- Matthias Klose <email address hidden>  Thu, 06 Sep 2012 23:03:51 +0200
Superseded in sid-release 
icedtea-web (1.3-1) unstable; urgency=high


  * IcedTea-Web 1.3 release.
  * Security updates:
    - CVE-2012-3422: Potential read from an uninitialized memory location.
    - CVE-2012-3423: Incorrect handling of not 0-terminated strings.
  * NetX fixes:
    - PR898: signed applications with big jnlp-file doesn't start (webstart
      affect like "frozen").
    - PR811: javaws is not handling urls with spaces (and other characters
      needing encoding) correctly.
  * Plugin fixes:
    - PR820: IcedTea-Web 1.1.3 crashing Firefox when loading Citrix XenApp.
    - PR863: Error passing strings to applet methods in Chromium.
    - PR895: IcedTea-Web searches for missing classes on each loadClass or
      findClass.
    - PR861: Allow loading from non codebase hosts. Allow code to connect
      to hosting server.
    - PR518: NPString.utf8characters not guaranteed to be nul-terminated.
    - PR722: META-INF/ unsigned entries should be ignored in signing.
    - PR855: AppletStub getDocumentBase() doesn't return full URL.
    - PR1011: Folders treated as jar files in archive tag.
    - PR1106: Buffer overflow in plugin table.
    - PR975: Plugin should not include classpaths specified in jar manifests
      when using jnlp_href.
    - PR588: Cookies not written from cookie jar to browser cookies.
  * Common fixes:
    - PR918: java applet windows uses a low resulution black/white icon.
    - Disambiguate signed applet security prompt from certificate warning.
    - PR955: regression: SweetHome3D fails to run.

  * For Ubuntu quantal, set priorities for alternatives higher than for
    OpenJDK 6.
  * Call update-alternatives when the existing priority for the alternative
    is lower than the current one.
  * icedtea-netx: Don't set the alternatives to a OpenJDK which is not
    installed. Closes: #681269.
  * Allow building the plugin for OpenJDK 6 using OpenJDK 7.
  * Build with hardening defaults.

 -- Matthias Klose <email address hidden>  Thu, 06 Sep 2012 15:15:52 +0200
Superseded in wheezy-release
Superseded in sid-release 
icedtea-web (1.2-2) unstable; urgency=low


  * Fix interpreter path and classpath for OpenJDK7. Closes: #663895.
  * Update to the 1.2 release branch 20120409.
    - Fix PR895 (IcedTea-Web searches for missing classes on each
      loadClass or findClass).

 -- Matthias Klose <email address hidden>  Mon, 09 Apr 2012 16:15:17 +0200
Superseded in sid-release 
icedtea-web (1.2-1) unstable; urgency=low


  * IcedTea-Web 1.2 release.
  * Make icedtea-netx-common multi-arch installable.

 -- Matthias Klose <email address hidden>  Fri, 09 Mar 2012 01:13:55 +0100
Superseded in sid-release 
icedtea-web (1.2~pre3-3) unstable; urgency=low


  * Really use OpenJDK 7 for the icedtea-7 plugin. Closes: #662239.

 -- Matthias Klose <email address hidden>  Sun, 04 Mar 2012 23:47:57 +0100
Superseded in sid-release 
icedtea-web (1.2~pre3-2) unstable; urgency=low


  * Fix another quoting issue. Closes: #662039.

 -- Matthias Klose <email address hidden>  Sun, 04 Mar 2012 13:18:02 +0100
Superseded in sid-release 
icedtea-web (1.2~pre3-1) unstable; urgency=low


  * Update to hg 20120303, taken from the icedtea-web-1.2 release branch.

 -- Matthias Klose <email address hidden>  Sat, 03 Mar 2012 12:30:45 +0100
Superseded in sid-release 
icedtea-web (1.2~pre2-1) unstable; urgency=low


  * Regenerate the control file.

 -- Matthias Klose <email address hidden>  Sun, 26 Feb 2012 17:48:03 +0100
Superseded in wheezy-release
Superseded in sid-release 
icedtea-web (1.1.4-1) unstable; urgency=medium


  * New upstream release with security fix :
    - RH742515, CVE-2011-3377: IcedTea-Web: second-level domain subdomains
      and suffix domain SOP bypass

  [ Sylvestre Ledru ]
  * Fix a typo in the description. (Closes: #644538)

  [ Damien Raude-Morvan ]
  * Compress manpages. (Closes: #642975)

 -- Damien Raude-Morvan <email address hidden>  Fri, 11 Nov 2011 12:21:32 +0100
Superseded in wheezy-release
Superseded in sid-release 
icedtea-web (1.1.3-2) unstable; urgency=low


  * Team upload
  * Sync from ubuntu
  * Explicit the dependency on the OpenJDK (Closes: #644045, #644094)
  * itweb-settings manpage added

 -- Sylvestre Ledru <email address hidden>  Tue, 04 Oct 2011 13:17:52 +0200
Superseded in sid-release 
icedtea-web (1.1.3-1) unstable; urgency=low


  * New upstream release:
    - Plug-in: PR782: Support building against npapi-sdk as well.
    - Common: PR794: IcedTea-Web does not work if a Web Start app jar has a
      Class-Path element in the manifest (e.g. Elluminate)
  * d/javaws.policy: Use AllPermission for netx.jar (as in Oracle JDK). 
  * Add myself as Uploader.

 -- Damien Raude-Morvan <email address hidden>  Wed, 28 Sep 2011 23:16:26 +0200
Superseded in sid-release 
icedtea-web (1.1.2-1) unstable; urgency=low


  * Team upload
  * New upstream release:
    - PR769: IcedTea-Web does not work with some ssl sites with OpenJDK7.
    - Javaws cannot use proxy settings from Firefox.
    (Closes: #640748, #640736, #641038)
  * Drop the dependency on xulrunner (Closes: #636514, #606234, #601779)
  * Fix FTBFS due to the switch to multiarch (Closes: #641798)

  [ Damien Raude-Morvan ]
  * Switch to 3.0 (quilt) format.
  * d/javaws.policy: Allow RuntimePermission for javaws to access
    sun.security.util package.
  * d/patches/javaws_change_java_policy.diff: Loading of javaws.policy.
  * d/rules: Install javaws.policy into /etc/icedtea-web/.

 -- Sylvestre Ledru <email address hidden>  Thu, 22 Sep 2011 10:48:22 +0200
Deleted in wheezy-release (Reason: None provided.)
Superseded in sid-release 
icedtea-web (1.1-1) unstable; urgency=low
  * IcedTea-Web 1.1 release. -- Matthias Klose <email address hidden>  Thu, 09 Jun 2011 11:58:59 +0200
Superseded in sid-release 
icedtea-web (1.1~20110608-1) unstable; urgency=low
  * Update to hg 20110608, taken from the icedtea-web-1.1 release branch. -- Matthias Klose <email address hidden>  Wed, 08 Jun 2011 22:11:08 +0200
Superseded in sid-release 
icedtea-web (1.1~20110530-1) unstable; urgency=low
  * Update to hg 20110530, taken from the icedtea-web-1.1 release branch. -- Matthias Klose <email address hidden>  Mon, 30 May 2011 22:08:47 +0200
Superseded in sid-release 
icedtea-web (1.1~20110510-1) unstable; urgency=low
  * Update to hg 20110510, taken from the icedtea-web-1.1 release branch.  * Adjust conflicts to the OpenJDK version in unstable.    Closes: #627779, #626605.  * Make transitional package architecture independent. Closes: #627745. -- Matthias Klose <email address hidden>  Wed, 25 May 2011 14:29:42 +0200
Superseded in sid-release 
icedtea-web (1.1~20110421-1) unstable; urgency=low
  * Update to hg 20110421, taken from the icedtea-web-1.1 release branch. -- Matthias Klose <email address hidden>  Thu, 21 Apr 2011 19:20:32 +0200
Deleted in experimental-release (Reason: None provided.) 
icedtea-web (1.1~20110420-1) experimental; urgency=low
  * Upload to experimental. -- Matthias Klose <email address hidden>  Wed, 20 Apr 2011 14:33:31 +0200
1 → 57 of 57 results First • Previous • Next • Last