CVS commit: [pkgsrc-2014Q1] pkgsrc/lang

["Matthias Scheler" <tron%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tron
Date:           Thu May  1 22:18:24 UTC 2014

Modified Files:
        pkgsrc/lang/sun-jdk7 [pkgsrc-2014Q1]: distinfo
        pkgsrc/lang/sun-jre7 [pkgsrc-2014Q1]: Makefile.common distinfo

Log Message:
Pullup ticket #4393 - requested by ryoon
lang/sun-jdk7: security update
lang/sun-jre7: security update

Revisions pulled up:
- lang/sun-jdk7/distinfo                                        1.15
- lang/sun-jre7/Makefile.common                                 1.6
- lang/sun-jre7/distinfo                                        1.17

---
   Module Name: pkgsrc
   Committed By:        ryoon
   Date:                Wed Apr 30 23:12:48 UTC 2014

   Modified Files:
        pkgsrc/lang/sun-jdk7: distinfo
        pkgsrc/lang/sun-jre7: Makefile.common distinfo

   Log Message:
   Update to 7.0.55

   Changelog:
   JavaFX Release Notes
   JavaFX is now part of JDK. JDK 7u55 release includes JavaFX version 2.2.55.

   New Features and Changes
   The frequency of some security dialogs has been reduced on systems that run 
the same RIA multiple times.
   See 8029649.

   Using "*" in Caller-Allowable-Codebase Attribute.

   If a stand-alone asterisk (*), or asterisk as part of a top level domain 
such as (*.org), is specified as the value for the Caller-Allowable-Codebase 
attribute, then calls from JavaScript code to the RIA will show a security 
warning. An option to remember the choice is also provided, and if the user 
selects the option to remember the choice to run the RIA, no further warning 
messages are shown for the same RIA, when run with JavaScript from the same 
source.

   For more information, see JAR File Manifest Attributes for Security 
documentation.

   See 8033707.

   Disabling Sponsor Offers in the Java Installer

   During the installation of Java, users may be presented with the option of 
downloading and installing sponsor offers, such as browser add-ons, or security 
software. With 7u55 and later releases of Java, sponsor offers can be bypassed 
entirely by using "SPONSORS=0" as an option, when installing Java via the 
command line:

       Manually download the 32bit online installer for 7u55 to your local 
machine.
       Click the Windows Start Button/Menu. From the available Menu choices, 
select the 'Search box' and enter the text "command" in it.
       A list of matches will appear. Select  'Command Prompt' from the 
available Programs list.
       Navigate to the folder containing the downloaded installer, e.g.:
       cd c:\Users\<username>\Downloads
       To start the installation, in the Command Prompt window type:
       jre-7u55-windows-i586-iftw.exe SPONSORS=0

   The option to disable sponsors will persist across all future updates and 
re-installs of Java.

   Note that sponsor offers, and therefore this functionality, is only 
applicable to online 32bit JRE installers and Auto Update mechanisms for the 
Windows operating system.

   Bug Fixes
   Bug Id       Category        Sub-Category    Description
   JDK-7190349  client-libs     2d      [macosx] Text (Label) is incorrectly 
drawn with a rotated g2d
   JDK-8013569  client-libs     2d      [macosx] JLabel preferred size 
incorrect on retina displays with non-default font size
   JDK-6571600  client-libs     java.awt        JNI use results in 
UnsatisfiedLinkError looking for libmawt.so
   JDK-8025588  client-libs     java.awt        [macosx] Frozen AppKit thread 
in 7u40
   JDK-5049299  core-libs       java.lang       (process) Use posix_spawn, not 
fork, on S10 to avoid swap exhaustion
   JDK-8020191  core-libs       java.lang       System.getProperty( " os.name " 
) returns " Windows NT (unknown) " on Windows 8.1
   JDK-8030822  core-libs       java.time       (tz) Support tzdata2013i
   JDK-8019853  core-libs       java.util.logging       Break logging and AWT 
circular dependency
   JDK-8026474  deploy  deployment_toolkit      deployJava.js versioncheck 
doesn't work in IE11
   JDK-8028691  deploy  plugin  loading browser proxy via config script should 
not trigger JAR download
   JDK-8029649  deploy  plugin  Reduce dialog frequency when app is run 
multiple times
   JDK-8033705  deploy  plugin  Array out of bounds exception in 
PluginMain.performSSVValidation
   JDK-8033779  deploy  plugin  JRE 7u51 Plugin Failing to Run Older JRE 
Version < 1.6.0
   JDK-8029922  deploy  webstart        32-bit only Java Web Start apps fail to 
run on 32- and 64-bit JRE configs
   JDK-8031579  deploy  webstart        Spurious Missing Manifest Permissions 
Attribute Warning When Launching versioned Java Web Start app
   JDK-8024830  hotspot         compiler        SEGV in 
org.apache.lucene.codecs.compressing.CompressingTermVectorsReader.get
   JDK-8035618  other-libs      corba:rmi-iiop  Four api/org_omg/CORBA TCK 
tests fail under plugin only


To generate a diff of this commit:
cvs rdiff -u -r1.14 -r1.14.2.1 pkgsrc/lang/sun-jdk7/distinfo
cvs rdiff -u -r1.5 -r1.5.2.1 pkgsrc/lang/sun-jre7/Makefile.common
cvs rdiff -u -r1.16 -r1.16.2.1 pkgsrc/lang/sun-jre7/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.