[Bug 3729] [IcedTea7] CVE-2018-3639 fix revision to prefer PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE

bugzilla-daemon at icedtea.classpath.org bugzilla-daemon at icedtea.classpath.org
Thu Jul 18 00:54:39 UTC 2019


https://icedtea.classpath.org/bugzilla/show_bug.cgi?id=3729

--- Comment #2 from hg commits <mercurial at icedtea.classpath.org> ---
details:
http://icedtea.classpath.org//hg/release/icedtea7-2.6?cmd=changeset;node=fccb67cea959
author: Andrew John Hughes <gnu_andrew at member.fsf.org>
date: Wed Jul 17 16:53:58 2019 +0100

    Bump to icedtea-2.6.19

    Upstream changes:
      - Bump to icedtea-2.6.19
      - PR3729: CVE-2018-3639 fix revision to prefer PR_SPEC_DISABLE_NOEXEC to
PR_SPEC_DISABLE
      - S7152169: TEST_BUG: sun/security/tools/jarsigner/ec.sh occasionally
fail due to keytool error on sparc
      - S7194075: Various classes of sunec.jar are duplicated in rt.jar
      - S7198901: correct the field size check when decoding a point on ECC
curve
      - S8006799: Optimize sun.nio.cs.ISO_8859_1$Encode.encodeArrayLoop() (jdk
part of 6896617)
      - S8031145: Re-examine closed i18n tests to see it they can be moved to
the jdk repository.
      - S8035974: Refactor DigestBase.engineUpdate() method for better code
generation by JIT compiler
      - S8135248: Add utility methods to check indexes and ranges
      - S8142493: Utility methods to check indexes and ranges doesn't specify
behavior when function produces null
      - S8146458: Improve exception reporting for
Objects.checkIndex/checkFromToIndex/checkFromIndexSize
      - S8149365, PR3741: aarch64: memory copy does not prefetch on backwards
copy
      - S8151340, PR3741: aarch64: prefetch the destination word for write
prior to ldxr/stxr loops.
      - S8153713, PR3741: aarch64: improve short array clearing using store
pair
      - S8153797, PR3741: aarch64: Add Arrays.fill stub code
      - S8155617, PR3741: aarch64: ClearArray does not use DC ZVA
      - S8155794: Move Objects.checkIndex BiFunction accepting methods to an
internal package
      - S8157841, PR3741: aarch64: prefetch ignores cache line size
      - S8159035: CTSMode.java test crashed due to unhandled case of cipher
length value as 0
      - S8179098: Crypto AES/ECB encryption/decryption performance regression
(introduced in jdk9b73)
      - S8181594: Efficient and constant-time modular arithmetic
      - S8182999: SunEC throws ProviderException on invalid curves
      - S8186325, PR3741: AArch64: jtreg test
hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
      - S8187946: Support ISO 4217 Amendments 163 and 164
      - S8191073: JpegImageReader throws IndexOutOfBoundsException when trying
to read image data from tables-only image
      - S8193552: ISO 4217 amendment 165
      - S8195478: sun/text/resources/LocaleDataTest.java fails with
java.lang.Exception
      - S8201317: X25519/X448 code improvements
      - S8202026: ISO 4217 amendment 166
      - S8203228: Branch-free output conversion for X25519 and X448
      - S8204269: ISO 4217 amendment 167
      - S8208648: ECC Field Arithmetic Enhancements
      - S8208698: Improved ECC Implementation
      - S8208746: ISO 4217 Amendment #168 update
      - S8209775: ISO 4217 Amendment #169 update
      - S8210153: localized currency symbol of VES
      - S8211435: Exception in thread "AWT-EventQueue-1"
java.lang.IllegalArgumentException: null source
      - S8212328: Exceptional throw cases
      - S8213431: Improve file protocol handling
      - S8213432: Better copies of CopiesList
      - S8215982: (tz) Upgrade time-zone data to tzdata2018i
      - S8216381: More limited privilege usage
      - S8217563: Improve realm maintenance
      - S8218781: Localized names for Japanese era Reiwa in COMPAT provider
      - S8218873: Improve JSSE endpoint checking
      - S8218876: Improve PNG support options
      - S8219018: Adjust positions of glyphs
      - S8219020: Table alternate substitutions
      - S8219775: Certificate validation improvements
      - S8220192: Better outlook for SecureRandom
      - S8220517: Enhanced GIF support
      - S8221518: Normalize normalization
      - S8223511: Extended AES support
      - S8224560: (tz) Upgrade time-zone data to tzdata2019a
      - S8224671, PR3741: AArch64: mauve System.arraycopy test failure
      - S8224828, PR3741: aarch64: rflags is not correct after safepoint poll
      - S8224880, PR3741: AArch64: java/javac error with
AllocatePrefetchDistance
      - S8225580: tzdata2018i integration causes test failures on jdk-13

    ChangeLog:

    2019-07-16  Andrew John Hughes  <gnu_andrew at member.fsf.org>

        Bump to 2.6.19.
        * Makefile.am:
        (CORBA_CHANGESET): Update to icedtea-2.6.19.
        (JAXP_CHANGESET): Likewise.
        (JAXWS_CHANGESET): Likewise.
        (JDK_CHANGESET): Likewise.
        (LANGTOOLS_CHANGESET): Likewise.
        (OPENJDK_CHANGESET): Likewise.
        (CORBA_SHA256SUM): Likewise.
        (JAXP_SHA256SUM): Likewise.
        (JAXWS_SHA256SUM): Likewise.
        (JDK_SHA256SUM): Likewise.
        (LANGTOOLS_SHA256SUM): Likewise.
        (OPENJDK_SHA256SUM): Likewise.
        * NEWS: Updated.
        * acinclude.m4:
        (JDK_UPDATE_VERSION): Bump to 231.
        (BUILD_VERSION): Set to b01.
        * configure.ac: Bump to 2.6.19.
        * hotspot.map.in: Update to icedtea-2.6.19.
        * patches/boot/ecj-diamond.patch:
        Regenerated.  Added new cases in
        sun.security.util.Optional and
        sun.security.util.Preconditions.
        * patches/boot/ecj-multicatch.patch:
        Add new case in sun.security.util.ECUtil.
        * patches/boot/ecj-stringswitch.patch:
        Add new cases in sun.security.util.Preconditions.
        * patches/pr2124.patch:
        Regenerated following 7194075 change to move
        curves to sun.security.ec.CurveDB.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20190718/c2f5abc1/attachment.html>


More information about the distro-pkg-dev mailing list