From gnu_andrew at member.fsf.org Tue Jan 28 00:47:12 2025 From: gnu_andrew at member.fsf.org (Andrew Hughes) Date: Tue, 28 Jan 2025 00:47:12 +0000 Subject: [SECURITY] IcedTea 3.34.0 for OpenJDK 8 Released! Message-ID: We are pleased to announce the release of IcedTea 3.34.0! The IcedTea project provides a harness to build the source code from OpenJDK using Free Software build tools, along with additional features such as the ability to build against system libraries and support for alternative virtual machines and architectures beyond those supported by OpenJDK. This release updates our OpenJDK 8 support with the January 2025 security fixes from OpenJDK 8u442. If you find an issue with the release, please report it to our bug database (https://github.com/icedtea-git/icedtea/issues) under the appropriate component. Development discussion takes place on the distro-pkg-dev at openjdk.org mailing list and patches are always welcome. Full details of the release can be found below. What's New? =========== New in release 3.34.0 (2025-01-27): * Import of OpenJDK 8 u442 build 06 - JDK-8048003: test/compiler/8009761/Test8009761.java failed with: java.lang.RuntimeException: static java.lang.Object Test8009761.m3(boolean,boolean) not compiled - JDK-8058322: Zero name_index item of MethodParameters attribute cause MalformedParameterException. - JDK-8066708: JMXStartStopTest fails to connect to port 38112 - JDK-8133287: (fs) java/nio/file/Files/probeContentType/ParallelProbes.java should use othervm mode - JDK-8189687: Swing: Invalid position of candidate pop-up of InputMethod in Hi-DPI on Windows - JDK-8209023: fix 2 compiler tests to avoid JDK-8208690 - JDK-8239312: [macOS] javax/swing/JFrame/NSTexturedJFrame/NSTexturedJFrame.java - JDK-8260380: Upgrade to LittleCMS 2.12 - JDK-8315731: Open source several Swing Text related tests - JDK-8335428: Enhanced Building of Processes - JDK-8335912: Add an operation mode to the jar command when extracting to not overwriting existing files - JDK-8336564: Enhance mask blit functionality redux - JDK-8338402: GHA: some of bundles may not get removed - JDK-8339133: [8u] Profiler crashes at guarantee(is_result_safe || is_in_asgct()): unsafe access to zombie method - JDK-8339180: Enhanced Building of Processes: Follow-on Issue - JDK-8339394: Bump update version of OpenJDK: 8u442 - JDK-8339882: Replace ThreadLocalStorage::thread with Thread::current_or_null in jdk8 backport of JDK-8183925 - JDK-8340815: Add SECURITY.md file - JDK-8342822: jdk8u432-b06 does not compile on AIX - JDK-8342841: [8u] Separate jdk_security_infra tests from jdk_tier1 The tarballs can be downloaded from: * http://icedtea.classpath.org/download/source/icedtea-3.34.0.tar.gz * http://icedtea.classpath.org/download/source/icedtea-3.34.0.tar.xz We provide both gzip and xz tarballs, so that those who are able to make use of the smaller tarball produced by xz may do so. The tarballs are accompanied by digital signatures available at: * http://icedtea.classpath.org/download/source/icedtea-3.34.0.tar.gz.sig * http://icedtea.classpath.org/download/source/icedtea-3.34.0.tar.xz.sig These are produced using my public key. See details below. PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net) Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222 https://keybase.io/gnu_andrew GnuPG >= 2.1 is required to be able to handle this key. SHA256 checksums: f0f8b8139e9cdaf1c87221b0b6f401a5cbdd72de2c26e39e2a3ef8ff1ded24b2 icedtea-3.34.0.tar.gz 5755c4eaa56ea5a21111900921e2d468363a3118d52ea3baa9fdbd22bc62e0d7 icedtea-3.34.0.tar.gz.sig e2f9799d15a160ab2392160a18bc99ff9bc3209f0a2daa7a8b11501dd5cc5cb7 icedtea-3.34.0.tar.xz 85d0f8b43d79268055372bc2dcd62090bbb392292ef5db138739afc857b4a53f icedtea-3.34.0.tar.xz.sig SHA512 checksums: 29a6d31431d019e347f83cb89d495f76fcc08c3a3aba1fbce3b8de74b7794681391601c2945cdacd96af3b58f3513c77875aa501b884ecf71189dcbb4d7a023e icedtea-3.34.0.tar.gz f99039412b37cc6d986d65e5e8d47fa351399ea5717e1805655e356ddd56fca1981baf838edf59a42ed2722de910c9dff87b20c43961bf57b3cef2d0d572963d icedtea-3.34.0.tar.gz.sig 4607e20a3a1ca3a1b32d911480d977f7b923cd398a56874a1ece5c3b604ce427c9ea03f4909dbbf748b14d2c3a0e7fbebadec573921b4f5c68ff3d6a446060b6 icedtea-3.34.0.tar.xz ae7c360be1e69c8d6ee4f4006f13b1fdb82d5bea7f0134e57d26cd1c86984e5179dd3460c11c028981d77c1433d1acb46466e658d0e98e6cb3ca09a2d49ffe21 icedtea-3.34.0.tar.xz.sig The checksums can be downloaded from: * http://icedtea.classpath.org/download/source/icedtea-3.34.0.sha256 * http://icedtea.classpath.org/download/source/icedtea-3.34.0.sha512 The following people helped with this release: * Andrew Hughes (all bug fixes and backports, release management) We would also like to thank the bug reporters and testers! To get started: $ tar xzf icedtea-3.34.0.tar.gz or: $ tar x -I xz -f icedtea-3.34.0.tar.xz then: $ mkdir icedtea-build $ cd icedtea-build $ ../icedtea-3.34.0/configure $ make Full build requirements and instructions are available in the INSTALL file. Happy hacking! -- Andrew :) Pronouns: he / him or they / them Principal Free Java Software Engineer OpenJDK Package Owner Red Hat, Inc. (http://www.redhat.com) PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net) Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222 Please contact via e-mail, not proprietary chat networks Available on Libera Chat & OFTC IRC networks as gnu_andrew -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 228 bytes Desc: not available URL: