[SECURITY] IcedTea 3.0.0 for OpenJDK 8 Released!
Andrew Hughes
gnu_andrew at member.fsf.org
Sun Apr 10 00:41:18 UTC 2016
We are pleased to (finally) announce the release of IcedTea 3.0.0!
The IcedTea project provides a harness to build the source code from
OpenJDK using Free Software build tools, along with additional
features such as the ability to build against system libraries and
support for alternative virtual machines and architectures beyond
those supported by OpenJDK.
This release begins our OpenJDK 8 support with the first release
based on OpenJDK 8 u77.
There are still some remaining issues with OpenJDK 8 support in
the alternate virtual machines, JamVM and CACAO. Both will build
against OpenJDK 8 but the resulting virtual machine crashes. We
hope this will improve with time, but for now, we recommend
sticking with HotSpot, and thus the use of the zero-assembler
projects for those architectures yet to have a native port.
If you find an issue with the release, please report it to our bug
database under the appropriate component
(http://icedtea.classpath.org/bugzilla). Development discussion takes
place on the distro-pkg-dev at openjdk.java.net mailing list and patches
are always welcome.
Full details of the release can be found below.
What's New?
===========
New in release 3.0.0 (2016-04-08):
* Rebase on jdk8u77-b03
* Backports
- S4890063, PR2304, RH1214835: HPROF: default text truncated when using doe=n option
- S6425769, PR2859: Allow specifying an address to bind JMX remote connector
- S8000650, PR2462: unpack200.exe should check gzip crc
- S8031668, PR2842: TOOLCHAIN_FIND_COMPILER unexpectedly resolves symbolic links
- S8035341: Allow using a system installed libpng
- S8038392: Generating prelink cache breaks JAVA 'jinfo' utility normal behavior
- S8042159: Allow using a system-installed lcms2
- S8042806: Splashscreen uses libjpeg-internal macros
- S8043805: Allow using a system-installed libjpeg
- S8044235: src.zip should include all sources
- S8074839, PR2462: Resolve disabled warnings for libunpack and the unpack200 binary
- S8074859, PR1937: Turn on warnings as error
- S8087218, PR2740: Constant fold loads from final instance fields in VM anonymous classes
- S8139932, PR2739: Typo in makefile changes for 8043805 [Allow using a system-installed libjpeg]
- S8140483, PR2740: Atomic*FieldUpdaters final fields should be trusted
- S8140620, PR2769: Find and load default.sf2 as the default soundbank on Linux
- S8145096, PR2854: Undefined behaviour in HotSpot
- S8145982, PR2859: JMXInterfaceBindingTest is failing intermittently
- S8146015, PR2859: JMXInterfaceBindingTest is failing intermittently for IPv6 addresses
- S8148351, PR2842: Only display resolved symlink for compiler, do not change path
- S8150954, PR2866, RH1176206: AWT Robot not compatible with GNOME Shell
* Bug fixes
- S8041658: Use of -fdevirtualize on macroAssembler_x86.o (via -O2) with gcc 4.9.0 creates broken VM
- PR94: empty install target in Makefile.am
- PR729: GTKLookAndFeel should be the system look&feel on all GNU/Linux desktops
- PR1275: Provide option to turn off downloading of tarballs
- PR1281, RH513605: Updating/Installing OpenJDK should recreate the shared class-data archive
- PR1289: Allow JARs to be optionally compressed by setting COMPRESS_JARS
- PR1291: Ensure unlimited crypto policy is in place.
- PR1325: Only add classes to rt-source-files.txt if actually needed
- PR1341: Remove Rhino support
- PR1346: Filter out -j option to make
- PR1347: Update list of checked JDKs
- PR1348: java -version output is broken
- PR1357: Make XRender mandatory
- PR1359: Check for /usr/lib64 JVMs and generic JPackage alternative
- PR1364: Replace hgforest support
- PR1367: Support using the system installation of LCMS
- PR1368: Ensure debug data is available for all libraries and binaries without redundant files
- PR1369: Remove outdated bootstrap configure tests or make them fail on error
- PR1377: Forwardport javac detection / usability test from IcedTea 2.x
- PR1379: Add build support for Zero AArch64
- PR1413: Undefined reference to libz during link of unpack200
- PR1741: Break PulseAudio provider out into IcedTea-Sound
- PR1766: Expand architecture support
- PR1774: Support GIF lib v5
- PR1774: Correct #ifdef to #if
- PR1796: make fails with "computed checksum did NOT match"
- PR1806: Support Debian/Ubuntu 7 & 8 OpenJDK Installs as Boot JDK
- PR1812: Unable to locate HotSpot checksum when downloading
- PR1813: HotSpot URL should be used with --enable-hg
- PR1815: Split download/extraction rules for OpenJDK so they can run in parallel
- PR1829: Support AM_MAINTAINER_MODE
- PR1834, RH1022017: Report elliptic curves supported by NSS, not the SunEC library
- PR1845: jstack.stp in OpenJDK8 is broken
- PR1869: Avoid x86 workaround when running Zero rather than a JIT
- PR1889: Allow tarball checksumming to be disabled
- PR1935: HotSpot extraction needs to depend on the tarball being downloaded
- PR1937: Add configure option for -Werror
- PR1938: Zero broken by enforced use of -Werror
- PR1942: Bug reports lack IcedTea version & distribution packaging information
- PR1950: Add build support for Zero SH
- PR1965, G498288: Allow builds on PaX kernels
- PR1968: Move to new OpenJDK bug URL format
- PR1975: SystemTap probes for the garbage collector.
- PR1977: Support using the system installation of Zlib
- PR1979: Support using the system installation of libjpeg
- PR1980: Support using the system installation of giflib
- PR1981: Support using the system installation of libpng
- PR1983: Support using the system installation of NSS with the SunEC provider
- PR1994: make dist broken
- PR2001: Synchronise HEAD tarball paths with release branch paths
- PR2066: Unset OS before running OpenJDK build
- PR2095, RH1163501: 2048-bit DH upper bound too small for Fedora infrastructure
- PR2126: Synchronise elliptic curves in sun.security.ec.NamedCurve with those listed by NSS
- PR2127: SunEC provider crashes when built using system NSS
- PR2199: Support giflib 5.1.0
- PR2212: DGifCloseFile call should check the return value, not the error code, for failure
- PR2227: giflib 5.1 conditional excludes 6.0, 7.0, etc.
- PR2237, RH1194378: ppc64le should report its os.arch as ppc64le so tools can detect it
- PR2248: HotSpot tarball fails verification after download
- PR2256: Add SystemTap tests
- PR2257: clean-extract-nashorn rule is never run
- PR2321: Checksum of policy JAR files changes on every build
- PR2329: jamvm parallel unpack failures
- PR2339: Fail early if there is no native HotSpot JIT & all other options are disabled
- PR2348: Avoid following symlinks for CACAO and JamVM patches
- PR2351: Split CACAO rule into configure and make stages
- PR2352: Split JamVM rule into configure, make and make install stages
- PR2358: Add aliases for all stamp targets
- PR2362: Update HACKING & fsg.sh.in
- PR2363: Remove EC source code prior to build
- PR2369: SunEC provider is partially installed
- PR2377: PaX mark the installed JDK so it runs on hardened systems
- PR2383: Location of docs directory in install-data-local is incorrect
- PR2392: Make elliptic curve removal optional
- PR2400, RH1206656: Zero JVM crashes on startup when built with GCC 5
- PR2407: Fix automatic enabling of the Zero build on non-JIT architectures which don't use CACAO or JamVM
- PR2408: Enable Zero when Shark is enabled
- PR2409: Update Zero macro to match one in IcedTea 2.x
- PR2410: Support PPC64 JIT on ppc64le
- PR2411: Fix references to hotspot.map following PR2001
- PR2413: OpenJDK doesn't auto-select Zero on architectures where no server JVM is available
- PR2414: CFLAGS, CXXFLAGS and LDFLAGS should be passed to OpenJDK build
- PR2415: JVM -Xmx requirement is too high on s390
- PR2428: OpenJDK build can't handle commas in LDFLAGS
- PR2429: OpenJDK build does not copy a symlinked cacerts file
- PR2432: ppc64 JIT doesn't support class data sharing
- PR2433: ppc64le does not support -Xshare:dump
- PR2434: SystemTap support is no longer optional
- PR2439: NSS PKCS11 regression - due to java.security automatic loading
- PR2443: install stage fails where BUILD_ARCH_DIR != INSTALL_ARCH_DIR
- PR2447: Allow greater control of Javadoc installation directory
- PR2448: Install TRADEMARK, COPYING and ChangeLog as RPM spec file does
- PR2454: install-data-local needs to check that classes.jsa actually exists
- PR2456: Installation path for hotspot_gc.stp is wrong, due to changed j2sdk-image location
- PR2459: Policy JAR files should be timestamped with the date of the policy file they hold
- PR2511: Reset success following calls in LayoutManager.cpp
- PR2541: Allow the user to specify the cacerts file to use
- PR2544: Desktop files do not allow installation from multiple versions of IcedTea
- PR2547: Extend tarball checksumming option to allow the checksum to be specified
- PR2631: jvm.cfg missing for ppc64le
- PR2633: s390 builds still fail as BUILD_NUM_BITS is never set
- PR2675: Update ppc64le autotools infrastructure following PR2237
- PR2691, G564746: ./configure is unable to compile using distcc for icedtea-3.0.0_pre06
- PR2737: Allow multiple PKCS11 library initialisation to be a non-critical error.
- PR2738: java.lang.UnsatisfiedLinkError: no javalcms in java.library.path
- PR2743: Remove bad AArch64 merge fragment
- PR2759: LCMS library should be named javalcms, not lcms, to avoid potential conflicts with the system library
- PR2766: Remove all references to GCJ
- PR2767: Remove remaining rogue binaries from OpenJDK tree
- PR2768: Move SystemTap GCC 4.5 patch to OpenJDK tree or discard if no longer needed
- PR2777: Fix MAX/MIN template usage on s390
- PR2804: test/tapset/jstaptest.pl should be executable
- PR2815: Race condition in SunEC provider with system NSS
- PR2825: Placement of -lfreebl matters when using bfd linker
- PR2826: Provide option to disable SystemTap tests
- PR2841: Parallelism issues resulting from PR2459
- PR2863: IcedTea doesn't pass through build and host triplets to OpenJDK's configure
- PR2865: Handle uninstallation.
- PR2869: Revert CRC fix (S8000650) backported as part of PR2462
- PR2873: Fix make distcheck.
- PR2880: Add missing test directory in make check.
- PR2885: Location of 'stap' executable is hard-coded
- PR2888: OpenJDK should check for system cacerts database (e.g. /etc/pki/java/cacerts)
- PR2899: Don't use WithSeed versions of NSS functions as they don't fully process the seed
- PR2906: Support prefixed variants of GNU tools used on *BSD systems
- PR2907: Replace --with-abs-install-dir with usual --prefix
- PR2917: Don't pass --with-cacerts-file to build if USE_ALT_CACERTS_FILE is not set
- PR2918: Makefile handles cacerts as a symlink, but the configure check doesn't
- PR2920: PaX marking fails on filesystems which don't support extended attributes
- PR2921: Uninstallation of docs deletes too much
- Don't substitute 'j' for '-j' inside -I directives
- Extend 8041658 to all files in the HotSpot build.
- Remove jcheck
* AArch64 port
- PR1970: Imported from aarch64 jdk8 repository.
- PR2853: Fix build for aarch64/zero
- PR2853: Remaining miscellaneous synchronisation changes from aarch64/jdk8u
- PR2853: Remove AArch64-specific code in generateOptoStub.cpp.
- PR2853: Remove some AArch64-specific code in share/.
- PR2853: Remove some unnecessary divergences from jdk8u.
- PR2853: Revert AArch64 jvm.cfg divergence
- PR2853: Revert changes to libpng source code now 8078245 is in place.
- PR2922: Import latest AArch64 changes from aarch64-port/jdk8u (aarch64-jdk8u77-b03)
- S8150652, PR2922: Remove unused code in AArch64 back end
* JamVM
- JSR 292: Invoke Dynamic
- JSR 308: Type Annotations
- JSR 335: Lambda Expressions
- JSR 901: VM support for method parameter reflection
- JEP 171: Implement fence methods in sun.misc.Unsafe
- sun.misc.Unsafe: additional methods get/putAddress.
- FreeClassData: adjust method count for Miranda methods
- Fix invokesuper check in invokespecial opcode
- Fix non-direct interpreter invokespecial super-class check
- When GC'ing a native method don't try to free code
- Do not free unprepared Miranda method code data
- Set anonymous class protection domain
- JVM_IsVMGeneratedMethodIx stub
- Dummy implementation of sun.misc.Perf natives
- JVM_NewMultiArray: element class may be an array
- jtreg test java/lang/reflect/Array/ExceedMaxDim
- OpenJDK: Fix Local/Anonymous class checks
- classlibMarkThreadTerminated should return Object*
- Fix race-condition in constant-pool resolution code
- JSR 292: MethodHandle constant-pool refs may be resolved
- JSR 292: bootstrap method args error handling
- JSR 308: update to match OpenJDK changes
- JSR 292: correct intrinsic cache COMPARE function
- Race condition in setting up imethod table
- GC: Minor performance improvement
- PR2034: --enable-jamvm builds broken, missing JVM_GetTemporaryDirectory impl
- PR2336: JamVM lacks JVM_FindClassFromCaller
- PR2523: Add executable stack markings to callNative.S on JamVM
- PR2775: JamVM lacks JVM_GetResourceLookupCacheURLs introduced by jdk8u40
* CACAO
- PR1277: Synchronise CACAO rules between IcedTea6/7/8 where possible
- PR1279: Synchronise CACAO versions between IcedTea6/7/8 where possible
- PR2035: --enable-cacao builds broken, missing JVM_GetTemporaryDirectory impl.
- PR2330, CA172, G453612: Add ARM hardfloat support to CACAO on Gentoo
- PR2331: IcedTea8 fails to build with IcedTea7 CACAO due to low max heap size
- PR2335: CACAO lacks JVM_FindClassFromCaller
- PR2347: Fix CACAO patches to apply again
- PR2349: ‘struct jvm_version_info’ has no member named ‘is_kernel_jvm’
- PR2350: Update to latest CACAO
- PR2354: stamps/cacao.stamp tries to touch a file in a directory which doesn't exist
- PR2355: CACAO build fails to use JRE layout
- PR2776: CACAO lacks JVM_GetResourceLookupCacheURLs introduced by jdk8u40
- PR2832, CA195: typeinfo.cpp: typeinfo_merge_nonarrays: Assertion `dest && result && x.any && y.any' failed
- PR2908: Add missing functions for CACAO OpenJDK JVM implementation
- PR2909: Install CACAO in same way as JamVM
- PR2910: Add rudimentary support for OpenJDK 8 class files to CACAO
- PR2916: Update CACAO drop to use the latest from cacao-staging
The tarballs can be downloaded from:
* http://icedtea.classpath.org/download/source/icedtea-3.0.0.tar.gz
* http://icedtea.classpath.org/download/source/icedtea-3.0.0.tar.xz
We provide both gzip and xz tarballs, so that those who are able to
make use of the smaller tarball produced by xz may do so.
The tarballs are accompanied by digital signatures available at:
* http://icedtea.classpath.org/download/source/icedtea-3.0.0.tar.gz.sig
* http://icedtea.classpath.org/download/source/icedtea-3.0.0.tar.xz.sig
These are produced using my public key. See details below.
PGP Key: ed25519/35964222 (hkp://keys.gnupg.net)
Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222
GnuPG >= 2.1 is required to be able to handle this key.
SHA256 checksums:
db874ae8dd14ab3eaed7b21a2895d6bfb3a4426e27289bbfaaf83f17bb5ed730 icedtea-3.0.0.tar.gz
a6a4da4e9012cb5b97823689700c82c573e0fc23a4c8b56977a4778ca69668cf icedtea-3.0.0.tar.gz.sig
947add69b3b89d7685cb0c9e2b51fc561e27f6e7c0bf1ea98dac8156fa8629a9 icedtea-3.0.0.tar.xz
e616412bc6a144c592f3c0dea51be2ea6d6fedcb173c3944f68f78eb7a8cd546 icedtea-3.0.0.tar.xz.sig
The checksums can be downloaded from:
* http://icedtea.classpath.org/download/source/icedtea-3.0.0.sha256
The following people helped with these releases:
* Lukas Berk (garbage collection probes for SystemTap)
* James Le Cuirot (PR2863)
* Taigo Sturmer Daitx (ppc64le support)
* Andrew Hughes (all other backports & bug fixes, release management)
* Radim Kolar (PR2906)
* Xerxes Rånby (CACAO & JamVM support)
* Ralph Sennhauser (initial PaX support)
* Yasumasa Suenaga (PR1845 and other SystemTap work)
* Mario Torre (S8150954)
* Jon VanAlten (SystemTap tests)
* Michal Vyskocil (PR1357 & PR1359)
* Mark Wielaard (SystemTap fixes & tests)
We would also like to thank the bug reporters and testers!
To get started:
$ tar xzf icedtea-3.0.0.tar.gz
or:
$ tar x -I xz -f icedtea-3.0.0.tar.xz
then:
$ mkdir icedtea-build
$ cd icedtea-build
$ ../icedtea-3.0.0/configure
$ make
Full build requirements and instructions are available in the INSTALL file.
Happy hacking!
--
Andrew :)
Senior Free Java Software Engineer
Red Hat, Inc. (http://www.redhat.com)
PGP Key: ed25519/35964222 (hkp://keys.gnupg.net)
Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 213 bytes
Desc: Digital signature
URL: <http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20160410/6315de37/signature.asc>
More information about the distro-pkg-dev
mailing list