[pkgsrc/trunk]: pkgsrc/lang Update sun-{jre,jdk}15 to 1.5.0.20.

[obache <obache%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/fdc249467572
branches:  trunk
changeset: 397897:fdc249467572
user:      obache <obache%pkgsrc.org@localhost>
date:      Thu Aug 20 08:46:40 2009 +0000

description:
Update sun-{jre,jdk}15 to 1.5.0.20.

Changes in 1.5.0_20

The full internal version number for this update release is 1.5.0_20-b02 (where
"b" means "build"). The external version number is 5.0u20.
OlsonData 2009i

This release contains Olson time zone data version 2009i. For more information,
refer to Timezone Data Versions in the JRE Software .

Security Baseline

This update release specifies the following security baseline:
JRE Family Version      Java SE
Security Baseline       Java SE for Business
Security Baseline 1.4.2         1.4.2_19        1.4.2_22

In December, 2008, Java SE 1.4.2 reached its end of service life with the
release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above)
include the Access Only option and are available to Java SE for Business
subscribers.

For more information about the security baseline, see Deploying Java Applets
With Family JRE Versions in Java Plug-in for Internet Explorer .

Root Certificates

Root Certificates are included in this release.

    * Added one new root certificate and removed 3 root certificates from Entrust. (Refer to 6805338.)
    * Added three new root certificates from Keynectis. (Refer to 6845457.)
    * Added three new root certificates from Quovadis. (Refer to 6846473.)

Bug Fixes

This release contains fixes for one or more security vulnerabilities. For more
information, please see Sun Alerts 263408 , 263409 , 263488 , 263489 , and 264648.

Bug fixes for vulnerabilities are listed in the following table.
        BugId   Category        Subcategory     Description 6656610     java    accessibility   AccessibleResourceBundle.getContents exposes mutable static (findbugs)
6656586         java    classes_awt     Cursor.predefined is protected static mutable (findbugs)
6660539         java    classes_beans   Introspector cache mutable static
6446522         java    classes_lang    3Y Race condition in reflection checks
6801071         java    classes_net     Remote sites can compromise user privacy and possibly hijack web session
6801497         java    classes_net     Proxy is assumed to be immutable but is non-final
6406003         java    classes_security        Security issues in the Provider class
6429594         java    classes_security        Fix for 6406003 can be circumvented
6444262         java    classes_security        Provider deserialization still has problems
6657695         java    classes_security        AbstractSaslImpl.logger is a static mutable (findbugs)
6657625         java    classes_sound   RmfFileReader/StandardMidiFileWriter.types are public mutable statics (findbugs)
6738524         java    classes_sound   JDK13Services allows read access to system properties from untrusted code
6777448         java    classes_sound   JDK13Services.getProviders creates instances with full privileges
6588003         java    classes_swing   LayoutQueue mutable statics
6660049         java    classes_swing   Synth Region.uiToRegionMap/lowerCaseNameMap are mutable statics
6656625         java    imageio         ImageReaderSpi.STANDARD_INPUT_TYPE/ImageWriterSpi.STANDARD_OUTPUT_TYPE are mutable static (findbugs)
6657133         java    imageio         Mutable statics in imageio plugins (findbugs)
6830335         java    jar     Java JAR Pack200 Decompression Integer Overflow Vulnerability
6862844         javawebstart    other   java web start ActiveX control security problem caused by ATL PROP_ENTRY macro
6845701         jaxp    parse   Xerces2 Java XML library infinite loop with malformed XML input
6657619         jndi    dns     DnsContext.debug is public static mutable (findbugs)

Other bug fixes are listed in the following table.
        BugId   Category        Subcategory     Description 6851379     java    classes_2d      font files not deleted upon exit
6805338         java    classes_security        Add 1 new Entrust root CA cert and remove 3 others with 1024 bit keys
6845457         java    classes_security        Add root certs for Keynectis CA
6846473         java    classes_security        Add QuoVadis root CA certs to the JRE
6848984         java    classes_util_i18n       (tz) Support tzdata2009i
6851214         java    classes_util_i18n       (tz) New Jordan rule creates a failure for SimpleTimeZone parsing post tzdata2009h

diffstat:

 lang/sun-jdk15/Makefile |   6 +++---
 lang/sun-jdk15/distinfo |  14 +++++++-------
 lang/sun-jre15/Makefile |   6 +++---
 lang/sun-jre15/distinfo |  14 +++++++-------
 4 files changed, 20 insertions(+), 20 deletions(-)

diffs (71 lines):

diff -r ab45041993b0 -r fdc249467572 lang/sun-jdk15/Makefile
--- a/lang/sun-jdk15/Makefile   Thu Aug 20 08:40:30 2009 +0000
+++ b/lang/sun-jdk15/Makefile   Thu Aug 20 08:46:40 2009 +0000
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.34 2009/07/23 17:18:43 abs Exp $
+# $NetBSD: Makefile,v 1.35 2009/08/20 08:46:40 obache Exp $
 
-DISTNAME=      jdk-1_5_0_19-linux-${DIST_ARCH}
-PKGNAME=       sun-jdk15-5.0.19
+DISTNAME=      jdk-1_5_0_20-linux-${DIST_ARCH}
+PKGNAME=       sun-jdk15-5.0.20
 MASTER_SITES=  # empty
 
 LICENSE=       sun-jdk6-license
diff -r ab45041993b0 -r fdc249467572 lang/sun-jdk15/distinfo
--- a/lang/sun-jdk15/distinfo   Thu Aug 20 08:40:30 2009 +0000
+++ b/lang/sun-jdk15/distinfo   Thu Aug 20 08:46:40 2009 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.20 2009/07/23 17:18:43 abs Exp $
+$NetBSD: distinfo,v 1.21 2009/08/20 08:46:40 obache Exp $
 
-SHA1 (jdk-1_5_0_19-linux-amd64.bin) = c1be7d7958f91fcc8b54b7eca47a8c6b8a7c7fc1
-RMD160 (jdk-1_5_0_19-linux-amd64.bin) = dbb4da115aca1032c2be5b8145d382598d5099aa
-Size (jdk-1_5_0_19-linux-amd64.bin) = 44133016 bytes
-SHA1 (jdk-1_5_0_19-linux-i586.bin) = dc61ef7b19ef87d1f916807b9682eb34191bdea5
-RMD160 (jdk-1_5_0_19-linux-i586.bin) = aa4eacca5d3ca9756c539590ca4a20122d2e88b7
-Size (jdk-1_5_0_19-linux-i586.bin) = 49732779 bytes
+SHA1 (jdk-1_5_0_20-linux-amd64.bin) = a6cb63cea5cf1f5038eaad36480cf6a42a995aca
+RMD160 (jdk-1_5_0_20-linux-amd64.bin) = c9b486e2b6696f1958506d29561303760df586dc
+Size (jdk-1_5_0_20-linux-amd64.bin) = 44145890 bytes
+SHA1 (jdk-1_5_0_20-linux-i586.bin) = 38aa18343fa86c06929b12f00d2b23c66fcb09d8
+RMD160 (jdk-1_5_0_20-linux-i586.bin) = fbbb9a4cfbf20030541d9326040c35d00ca913bc
+Size (jdk-1_5_0_20-linux-i586.bin) = 49742383 bytes
diff -r ab45041993b0 -r fdc249467572 lang/sun-jre15/Makefile
--- a/lang/sun-jre15/Makefile   Thu Aug 20 08:40:30 2009 +0000
+++ b/lang/sun-jre15/Makefile   Thu Aug 20 08:46:40 2009 +0000
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile,v 1.58 2009/08/04 08:13:56 abs Exp $
+# $NetBSD: Makefile,v 1.59 2009/08/20 08:46:40 obache Exp $
 
 # Note: Regen distinfo with PKG_DEFAULT_OPTIONS+=sun-jre-jce
 
-DISTNAME=      jre-1_5_0_19-linux-${DIST_ARCH}
-PKGNAME=       sun-jre15-5.0.19
+DISTNAME=      jre-1_5_0_20-linux-${DIST_ARCH}
+PKGNAME=       sun-jre15-5.0.20
 MASTER_SITES=  # empty
 
 LICENSE=       sun-jre6-license
diff -r ab45041993b0 -r fdc249467572 lang/sun-jre15/distinfo
--- a/lang/sun-jre15/distinfo   Thu Aug 20 08:40:30 2009 +0000
+++ b/lang/sun-jre15/distinfo   Thu Aug 20 08:46:40 2009 +0000
@@ -1,11 +1,11 @@
-$NetBSD: distinfo,v 1.21 2009/07/23 17:14:40 abs Exp $
+$NetBSD: distinfo,v 1.22 2009/08/20 08:46:40 obache Exp $
 
 SHA1 (jce_policy-1_5_0.zip) = f0e887b91b4499142285633e65c5710c3a133a16
 RMD160 (jce_policy-1_5_0.zip) = eb12d0333c3ddbbba57a0e825a6891a75ec485c0
 Size (jce_policy-1_5_0.zip) = 8826 bytes
-SHA1 (jre-1_5_0_19-linux-amd64.bin) = 58af64e31821889fe26f4e567598b087651d437a
-RMD160 (jre-1_5_0_19-linux-amd64.bin) = c6ba29fe39669c9cf6954288b20e1353250bb649
-Size (jre-1_5_0_19-linux-amd64.bin) = 16795810 bytes
-SHA1 (jre-1_5_0_19-linux-i586.bin) = a7e897553918b34a37b4e083782357f7c263f29d
-RMD160 (jre-1_5_0_19-linux-i586.bin) = 831a0dceaa487ef9b53c2a66ac19ab4af183566d
-Size (jre-1_5_0_19-linux-i586.bin) = 17257283 bytes
+SHA1 (jre-1_5_0_20-linux-amd64.bin) = 29c4c8d026a6ea629ff26e78917a74bb4f3f2a73
+RMD160 (jre-1_5_0_20-linux-amd64.bin) = 15bb62c5d0d0bba312796efe5380df4cac3d6ba0
+Size (jre-1_5_0_20-linux-amd64.bin) = 16800390 bytes
+SHA1 (jre-1_5_0_20-linux-i586.bin) = 7f341a025588e05ab7c35fc1cdae7ca7a61c1b3a
+RMD160 (jre-1_5_0_20-linux-i586.bin) = 1431b39c0733b4e737b4e9a145118908344bf72f
+Size (jre-1_5_0_20-linux-i586.bin) = 17265677 bytes