aboutsummaryrefslogtreecommitdiffstats
path: root/ChangeLog
diff options
context:
space:
mode:
authorDeepak Bhole <[email protected]>2011-11-08 11:06:52 -0500
committerDeepak Bhole <[email protected]>2011-11-08 11:06:52 -0500
commit0dca9f29a8f29cb7b00b7841805a9d87a437a899 (patch)
tree30d9bb4b3962e7be88d968b91254478b2966a1f8 /ChangeLog
parent7636caae8332a84c3ec0b87eb369c3ec1e7f0d62 (diff)
parentfa8353ea0077bca56e22962c47354454e75278c4 (diff)
merge
Diffstat (limited to 'ChangeLog')
-rw-r--r--ChangeLog8
1 files changed, 8 insertions, 0 deletions
diff --git a/ChangeLog b/ChangeLog
index fb76586..77887ac 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -6,6 +6,14 @@
* netx/net/sourceforge/jnlp/tools/JarSigner.java (verifyJars): Continue
with other jars if the first jar can't be used.
+2011-10-28 Deepak Bhole <[email protected]>
+
+ RH742515, CVE-2011-3377: IcedTea-Web: second-level domain subdomains and
+ suffix domain SOP bypass
+ * NEWS: Updated
+ * netx/net/sourceforge/jnlp/runtime/JNLPSecurityManager.java
+ (checkPermission): Remove special case for SocketPermission.
+
2011-10-27 Deepak Bhole <[email protected]>
PR778: Jar download and server certificate verification deadlock