[Reposted on behalf of Matthias Klose, release manager for 1.8]

We are proud to announce the release of IcedTea6 1.8.1.

This update contains the following security updates:

The IcedTea project provides a harness to build the source code from OpenJDK6 using Free Software build tools. It also includes the only Free Java plugin and Web Start implementation, and support for additional architectures over and above x86, x86_64 and SPARC via the Zero assembler port.

What’s New?

  • S6678385, RH551835: Fixes jvm crashes when window is resized.
  • Produces the “expected” behavior for full screen applications, when running the Metacity window manager.
  • PR453, OJ100142: Fix policy evaluation to match the proprietary JDK.
  • IcedTeaNPPlugin.
    • RH524387: javax.net.ssl.SSLKeyException: RSA premaster secret error
    • Set context classloader for all threads in an applet’s threadgroup
    • PR436: Close all applet threads on exit
    • PR480: NPPlugin with NoScript extension.
    • PR488: Question mark changing into underscore in URL.
    • RH592553: Fix bug causing 100% CPU usage.
    • Don’t generate a random pointer from a pthread_t in the debug output.
    • Add ForbiddenTargetException for legacy support.
    • Use variadic macro for plugin debug message printing.
    • Don’t link the plugin with libxul libraries.
    • Fix race conditions in plugin initialization code that were causing hangs.
    • RH506730: BankID (Norwegian common online banking authentication system) applet fails to load.
    • PR491: pass java_{code,codebase,archive} parameters to Java.
    • Adds javawebstart.version property and give user permission to read that property.
  • NetX:
    • Fix security flaw in NetX that allows arbitrary unsigned apps to set any java property.
    • Fix a flaw that allows unsigned code to access any file on the machine (accessible to the user) and write to it.
    • Make path sanitization consistent; use a blacklisting approach.
    • Make the SingleInstanceServer thread a daemon thread.
    • Handle JNLP files which use native libraries but do not indicate it
    • Allow JNLP classloaders to share native libraries
    • Added encoding support
  • PulseAudio:
    • Eliminate spurious exception throwing.
  • Zero/Shark:
    • PR483: Fix miscompilation of sun.misc.Unsafe::getByte.
    • PR324,PR481: Fix Shark VM crash.
    • Fix Zero build on Hitachi SH.
  • SystemTap support:
    • PR476: Enable building SystemTap support on GCC 4.5.
  • The tarball can be downloaded here:

    The following people helped with this release: Gary Benson, Deepak Bhole, Andrew John Hughes, Mark Wielaard, Matthias Klose, Omair Majid, Pavel Tisnovsky, Xerxes Rånby, Jon VanAlten, Man Lung Wong, and many others.

    We would also like to thank the bug reporters and testers!

    To get started:

    $ hg clone http://icedtea.classpath.org/hg/release/icedtea6-1.8.1
    $ cd icedtea6-1.8.1

    Full build requirements and instructions are in INSTALL:

    $ ./configure [--enable-visualvm --with-openjdk --enable-pulse-java
    --enable-systemtap --enable-nss ...]
    $ make