A new release of IcedTea6 1.11 branch is now available: 1.11.1 The update contains the following security fixes: S7082299, CVE-2011-3571: Fix in AtomicReferenceArray S7088367, CVE-2011-3563: Fix issues in java sound S7110683, CVE-2012-0502: Issues with some KeyboardFocusManager method S7110687, CVE-2012-0503: Issues with TimeZone class S7110700, CVE-2012-0505: Enhance exception throwing mechanism in ObjectStreamClass S7110704, CVE-2012-0506: Issues with some method in corba S7112642, CVE-2012-0497: Incorrect checking for graphics rendering object S7118283, CVE-2012-0501: Better input parameter checking in zip file processing S7126960, CVE-2011-5035: (httpserver) Add property to limit number of request headers to the HTTP Server This release also contains the following additional fix: ...

After quite a bit of delay, IcedTea6 1.11 has finally been released! Take a look at the release announcement, download icedtea6 1.11 and build it. Onwards to IcedTea6 1.12!

I have just branched IcedTea6 1.11. Please start subjecting this branch to the most vicious tests you have. I am planning to release IcedTea6 1.11 on Wednesday 2012-01-18, unless major problems are discovered. As always, a list of new features in this release can be found in the NEWS file. Only bugfixes are likely to be accepted for the branch. Please try to minimize changes and hold off any build-system related changes unless they are absolutely necessary. ...

A number of changes occurred between IcedTea-Web 1.0 and IcedTea-Web 1.1. If you are a packager or a developer here are some things you need to know. Are you a packager? IcedTea-Web 1.1 can be installed into a regular prefix (/usr/ or /usr/local/ or anything else). Unlike IcedTea-Web 1.0, you do not need to install IcedTea-Web into a JDK or JRE directory. IcedTea-Web uses a JDK to build itself (specified using --with-jdk-home). IcedTea-Web will use the JDK it was compiled against to run. The launchers (javaws and itweb-settings) are now shell scripts and can be customized as needed. ...