From gnu_andrew at member.fsf.org Sun May 4 21:22:19 2025 From: gnu_andrew at member.fsf.org (Andrew Hughes) Date: Sun, 4 May 2025 22:22:19 +0100 Subject: [SECURITY] IcedTea 3.35.0 for OpenJDK 8 Released! Message-ID: We are pleased to announce the release of IcedTea 3.35.0! The IcedTea project provides a harness to build the source code from OpenJDK using Free Software build tools, along with additional features such as the ability to build against system libraries and support for alternative virtual machines and architectures beyond those supported by OpenJDK. This release updates our OpenJDK 8 support with the April 2025 security fixes from OpenJDK 8u452. If you find an issue with the release, please report it to our bug database (https://github.com/icedtea-git/icedtea/issues) under the appropriate component. Development discussion takes place on the distro-pkg-dev at openjdk.org mailing list and patches are always welcome. Full details of the release can be found below. What's New? =========== New in release 3.35.0 (2025-05-04): * Import of OpenJDK 8 u452 build 09 - JDK-8037013: [TESTBUG] Fix test/java/lang/ClassLoader/Assert.sh on AIX - JDK-8048215: [TESTBUG] java/lang/management/ManagementFactory/ThreadMXBeanProxy.java Expected non-null LockInfo - JDK-8068305: [TEST_BUG] Test java/awt/Mixing/HWDisappear.java fails with GTKL&F - JDK-8212096: javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java failed intermittently due to SSLException: Tag mismatch - JDK-8227651: Tests fail with SSLProtocolException: Input record too big - JDK-8240235: jdk.test.lib.util.JarUtils updates jar files incorrectly - JDK-8244966: Add .vscode to .hgignore and .gitignore - JDK-8261020: Wrong format parameter in create_emergency_chunk_path - JDK-8265019: Update tests for additional TestNG test permissions - JDK-8266881: Enable debug log for SSLEngineExplorerMatchedSNI.java - JDK-8268457: XML Transformer outputs Unicode supplementary character incorrectly to HTML - JDK-8285756: clean up use of bad arguments for `@clean` in langtools tests - JDK-8309841: Jarsigner should print a warning if an entry is removed - JDK-8316193: jdk/jfr/event/oldobject/TestListenerLeak.java java.lang.Exception: Could not find leak - JDK-8326110: [8u] The Marlin tests should be updated after JDK-8241307 - JDK-8337494: Clarify JarInputStream behavior - JDK-8337692: Better TLS connection support - JDK-8338430: Improve compiler transformations - JDK-8339560: Unaddressed comments during code review of JDK-8337664 - JDK-8339637: (tz) Update Timezone Data to 2024b - JDK-8339644: Improve parsing of Day/Month in tzdata rules - JDK-8339810: Clean up the code in sun.tools.jar.Main to properly close resources and use ZipFile during extract - JDK-8340552: Harden TzdbZoneRulesCompiler against missing zone names - JDK-8340660: [8u] Test com/sun/jdi/PrivateTransportTest.sh fails on MacOS - JDK-8342562: Enhance Deflater operations - JDK-8343007: Enhance Buffered Image handling - JDK-8345504: Bump update version of OpenJDK: 8u452 - JDK-8346140: [8u] tools/jar/ExtractFilesTest.java and tools/jar/MultipleManifestTest.java fails with jtreg5.1 - JDK-8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs - JDK-8347847: Enhance jar file support - JDK-8347965: (tz) Update Timezone Data to 2025a - JDK-8348211: [8u] sun/management/jmxremote/startstop/JMXStartStopTest.java fails after backport of JDK-8066708 - JDK-8350816: [8u] Update TzdbZoneRulesCompiler to ignore HST/EST/MST links - JDK-8352097: (tz) zone.tab update missed in 2025a backport - JDK-8353433: XCG currency code not recognized in JDK 8u * Backports - JDK-8293107: GHA: Bump to Ubuntu 22.04 The tarballs can be downloaded from: * http://icedtea.classpath.org/download/source/icedtea-3.35.0.tar.gz * http://icedtea.classpath.org/download/source/icedtea-3.35.0.tar.xz We provide both gzip and xz tarballs, so that those who are able to make use of the smaller tarball produced by xz may do so. The tarballs are accompanied by digital signatures available at: * http://icedtea.classpath.org/download/source/icedtea-3.35.0.tar.gz.sig * http://icedtea.classpath.org/download/source/icedtea-3.35.0.tar.xz.sig These are produced using my public key. See details below. PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net) Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222 https://keybase.io/gnu_andrew GnuPG >= 2.1 is required to be able to handle this key. SHA256 checksums: 94f7ee6db16c0212250cde43236289939ccfb794721dbee45a2cef480fab06bc icedtea-3.35.0.tar.gz b9505bc1f5e8015cd4cac1871046afb7db24f591a59b421aa99c99254e0c0032 icedtea-3.35.0.tar.gz.sig 9806a926a9fc86d1b72e4e8cb58336eb39cd6790684d302127f74c30a27420d7 icedtea-3.35.0.tar.xz 0a29cfd5606cacd6cd8faaaea670c26656ba957686f77d75096fcffd40c8b057 icedtea-3.35.0.tar.xz.sig SHA512 checksums: 34d17e1291de836f00d671550ca8303a0ba169937c29acced3e6c6aadab675819fb990e88f73ca87889ca98ecb7f9ecd3d7d309d21be46aaa9a589107feeecaf icedtea-3.35.0.tar.gz df7085a23150c06083af0d688d4ed698f06bc120227065535ea39bc9e741bcb5a2f95ae807819495144c526814930fe4d5ba7542eaed96b25d30a4c8ebbdcfdc icedtea-3.35.0.tar.gz.sig 3e997c8d2aa414fab1929c0dd8ff586950bc653a574b929e5c34b6e01bea1af9259b2c9548e9187dc2b2e3e0358ffe991c460cff7a2efc33c7aa66a6812c0804 icedtea-3.35.0.tar.xz 490561212edadf914ed8c5b90ec3d308ba43f495453fa761a043443c34acc9fe7a95e591f3a13aa00f2896697fdb8791c5e4ea138ba207624172f52c9bd967bb icedtea-3.35.0.tar.xz.sig The checksums can be downloaded from: * http://icedtea.classpath.org/download/source/icedtea-3.35.0.sha256 * http://icedtea.classpath.org/download/source/icedtea-3.35.0.sha512 The following people helped with this release: * Andrew Hughes (all bug fixes and backports, release management) We would also like to thank the bug reporters and testers! To get started: $ tar xzf icedtea-3.35.0.tar.gz or: $ tar x -I xz -f icedtea-3.35.0.tar.xz then: $ mkdir icedtea-build $ cd icedtea-build $ ../icedtea-3.35.0/configure $ make Full build requirements and instructions are available in the INSTALL file. May the source be with you, -- Andrew :) Pronouns: he / him or they / them Principal Free Java Software Engineer OpenJDK Package Owner Red Hat, Inc. (http://www.redhat.com) PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net) Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222 Please contact via e-mail, not proprietary chat networks -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 228 bytes Desc: not available URL: From gnu_andrew at member.fsf.org Thu May 8 17:42:15 2025 From: gnu_andrew at member.fsf.org (Andrew Hughes) Date: Thu, 8 May 2025 18:42:15 +0100 Subject: iced tea availability for OpenJDK 8u452 Released In-Reply-To: References: Message-ID: On 11:20 Wed 30 Apr , Ajay kemparaj wrote: > Hello , > > is there any scheduled release date iced tea release for OpenJDK 8u452 > > Thanks, > Ajay Kemparaj Sorry for the delay. 3.35.0 with 8u452 was released on May the 4th: https://bit.ly/it33500 Thanks, -- Andrew :) Pronouns: he / him or they / them PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net) Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222 -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 228 bytes Desc: not available URL: