OpenJDK 11.0.4 Released
Andrew John Hughes
gnu.andrew at redhat.com
Wed Jul 17 03:44:46 UTC 2019
We are pleased to announce the release of OpenJDK 11.0.4.
The source tarball is available from:
* https://openjdk-sources.osci.io/openjdk11/openjdk-11.0.4+11.tar.xz
The tarball is accompanied by a digital signature available at:
* https://openjdk-sources.osci.io/openjdk11/openjdk-11.0.4+11.tar.xz.sig
This is signed by our Red Hat OpenJDK key (openjdk at redhat.com):
PGP Key: rsa4096/0x92EF8D39DC13168F (hkp://keys.gnupg.net)
Fingerprint = CA5F 11C6 CE22 644D 42C6 AC44 92EF 8D39 DC13 168F
SHA256 checksums:
d138f10168e4929ed992be99c2059b0ea46c648e1b0080ce1c44a526e498fc05
openjdk-11.0.4+11.tar.xz
afdd3f4c7cc9ad8e8e96a6929c51dfff83d41958bb004618e7bea43a1fd7d939
openjdk-11.0.4+11.tar.xz.sig
The checksums can be downloaded from:
* https://openjdk-sources.osci.io/openjdk11/openjdk-11.0.4+11.sha256
What's New?
===========
* Security fixes
- S8208698, CVE-2019-2745: Improved ECC Implementation
- S8212328, CVE-2019-2762: Exceptional throw cases
- S8213431, CVE-2019-2766: Improve file protocol handling
- S8213432, CVE-2019-2769: Better copies of CopiesList
- S8216381, CVE-2019-2786: More limited privilege usage
- S8217563: Improve realm maintenance
- S8218863: Better endpoint checks
- S8218873: Improve JSSE endpoint checking
- S8218876, CVE-2019-7317: Improve PNG support options
- S8219775: Certificate validation improvements
- S8220517: Enhanced GIF support
- S8221345, CVE-2019-2818: Better Poly1305 support
- S8221518, CVE-2019-2816: Normalize normalization
- S8222678, CVE-2019-2821: Improve TLS negotiation
* Other fixes
- S6913047: Long term memory leak when using PKCS11 and JCE exceeds 32
bit process address space
- S8139178: Wrong fontMetrics when printing in Landscape (OpenJDK)
- S8163805: hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java
failed with timed out
- S8170494: JNI exception pending in PlainDatagramSocketImpl.c
- S8174691: [TESTBUG] A number of native hotspot unit tests fail when
executed in stand-alone mode
- S8179098: Crypto AES/ECB encryption/decryption performance
regression (introduced in jdk9b73)
- S8181143: Introduce diagnostic flag to abort VM on too long VM
operations
- S8188133: C2: Static field accesses in clinit can trigger
deoptimizations
- S8190361: Incorrect version info in jaccessinspector.exe and
jaccesswalker.exe
- S8195793: Remove GTE CyberTrust Global Root
- S8200286: (testbug) MOptionTest test fails with
java.lang.AssertionError: Classfiles too old!
- S8200613: SA: jstack throws UnmappedAddressException with a CDS core
file
- S8201317: X25519/X448 code improvements
- S8201633: Problems with AES-GCM native acceleration
- S8202353: os::readdir should use readdir instead of readdir_r
- S8202414: Unsafe write after primitive array creation may result in
array length change
- S8202651: Test ComodoCA.java fails
- S8202794: Native Unix code should use readdir rather than readdir_r
- S8202884: SA: Attach/detach might fail on Linux if debugee
application create/destroy threads during attaching
- S8203627: Swing applications with JRadioButton and JCheckbox fail to
render correctly when using GTK3 and the GTK L&F
- S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java fails
when running in CDS mode
- S8205574: Loop predication "assert(f <= 1 && f >= 0) failed
Incorrect frequency"
- S8205611: Improve the wording of LinkageErrors to include module and
class loader information
- S8206955: MethodHandleProxies.asInterfaceInstance does not support
default methods
- S8207340: (fs) UnixNativeDispatcher close and readdir usages should
be fixed
- S8207748: Fix for 8202794 breaks tier1 builds
- S8207760: SAXException: Invalid UTF-16 surrogate detected: d83c ?
- S8208634: Add x-IBM-1129 charset
- S8208648: ECC Field Arithmetic Enhancements
- S8208702:
javax/swing/reliability/HangDuringStaticInitialization.java may hang on
macos
- S8208996: X11 icon window color handing bug
- S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler seems to
use WeakHashMap incorrectly
- S8209414: AArch64: method handle invocation does not respect JVMTI
interp_only mode
- S8209415: Fix JVMTI test failure HS202
- S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry on failure
- S8209914: javadoc search sometimes generates bad URIs
- S8209951: Problematic sparc intrinsic:
com.sun.crypto.provider.CipherBlockChaining
- S8210008: custom extension for make/SourceRevision.gmk
- S8210197: javac can't tell during speculative attribution if a
diamond expression is creating an anonymous inner class or not
- S8210283: Support git as an SCM alternative in the build
- S8210320: PPC64: Fix uninitialized variable in C1 LIR assembler code
- S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
- S8210483: AssertionError in DeferredAttr at setOverloadKind caused
by JDK-8203679
- S8210519: build/releaseFile/CheckSource.java failed additional
sources found
- S8210739: Calling JSpinner's setFont with null throws
NullPointerException
- S8210782: Upgrade HarfBuzz to the latest 2.3.1
- S8210803: Compilation failure in codeBlob.cpp for Windows 32-bit
- S8210837: Add libXrandr-devel to the Linux devkits
- S8210863: Remove Xrandr include files from JDK sources
- S8210880: Remove HPKeysym.h from JDK sources
- S8210886: Remove references in xwindows.md to non-existent files.
- S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32 mistakenly
set the crc32 value into size field
- S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
ZipFSTester.checkRead(): bound must be positive
- S8211350: Remove jprt support
- S8211393: Memory leak issue on awt_InputMethod.c
- S8211435: Exception in thread "AWT-EventQueue-1"
java.lang.IllegalArgumentException: null source
- S8211698: Crash in C2 compiled code during execution of double array
heavy processing code
- S8211810: X11 Time stamp data should be unsigned
- S8211826: StringIndexOutOfBoundsException happens via
GetStringUTFRegion()
- S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not compile (aix)
- S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java searching
for wrong paths
- S8211971: Move security/cacerts/VerifyCACerts.java and
security/CheckBlacklistedCerts.java
- S8212202: [Windows] Exception if no printers are installed.
- S8212205: VM asserts after CDS archive has been unmapped
- S8212562: To remove lib/security from test/jdk/TEST.groups
- S8212676: AWT SystemColor setting on CDE
- S8212677: X11 default visual support for IM status window on VNC
- S8212678: Windows IME related patch
- S8212794: IBM-964 is required for AIX default charset
- S8212828: (process) Provide a way for Runtime.exec to use
posix_spawn on linux
- S8213015: Inconsistent settings between JFR.configure and
-XX:FlightRecorderOptions
- S8213213: Remove src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
- S8213232: Unix/X11 setCompositionEnableNative issue
- S8213292: Input freezes after MacOS key-selector (press&hold) usage
on macOS Mojave
- S8213294: Upgrade IANA LSR data
- S8213515: Improve freetype detection on linux/ppc64/ppc64le/s390x
- S8213614: DnD operation change feature does not work with 64bit big
endian CPU
- S8213617: JFR should record the PID of the recorded process
- S8213618: IBM970 charset has missing entry and remove unexpected entries
- S8213825: assert(false) failed: Non-balanced monitor enter/exit!
Likely JNI locking
- S8213944: Fix AIX build after the removal of Xrandr.h and add a
configure check for it
- S8214002: Cannot use italic font style if the font has embedded bitmap
- S8214109: XToolkit is not correctly displayed color on 16-bit high
color setting
- S8214111: There is no icon in all JOptionPane target image
- S8214112: The whole text in target JPasswordField image are not selected
- S8214252: Expanded & Collapsed nodes of a JTree look the same on GTK3
- S8214253: Tooltip is transparent rather than having a black background
- S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
- S8214533: IBM-29626C is required for AIX default charset
- S8214765: All TrayIcon MessageType icons does not show up with gtk3
option set
- S8214935: Upgrade IANA LSR data
- S8215026: Incorrect amount of memory unmapped with
ImageFileReader::close()
- S8215123: Crash in runtime image built with jlink --compress=2
- S8215284: Reduce noise induced by periodic task getFileSize()
- S8215296: do not disable c99 on Solaris
- S8215342: [Zero] Build fails after JDK-8200613
- S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while using
Swing-FX interop
- S8215374: 32-bit build failures after JDK-8181143 (Introduce
diagnostic flag to abort VM on too long VM operations)
- S8215398: -Xlog option usage => Invalid decorator '\temp\app_cds.log'.
- S8215443: The use of TransportContext.fatal() leads to bad coding style
- S8215472: (zipfs) Cleanups in implementation classes of jdk.zipfs
and tests
- S8215707: [macosx] fix pthread_getschedparam and
pthread_setschedparam calls
- S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate() computes
wrong IDOM
- S8215790: Delegated task created by SSLEngine throws
java.nio.BufferUnderflowException
- S8216045: The size of key_exchange may be wrong on FFDHE
- S8216355: missing NULL checks in libnet in interface iteration and
potential resource leak in getMacAddress
- S8216556: Unnecessary liveness computation with JVMTI
- S8216577: Add GlobalSign's R6 Root certificate
- S8216597: SIGBUS in
Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after JDK-6913047
- S8216970: condy causes JVM crash
- S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak) after
JDK-8216597 (SIGBUS error in getNativeKeyInfo)
- S8217094: HttpClient SSL race if a socket IOException is raised
before ALPN is available
- S8217263: Automate DashOffset test
- S8217311: Improve Exception thrown when MulticastSocket.setInterface
fails on AIX(Unix)
- S8217564: idempotent protection missing in crc32c.h
- S8217647: JFR: recordings on 32-bit systems unreadable
- S8217690: Update public suffix version
- S8217707: JNICALL declaration breaks Splash screen functions
- S8217765: Internal Error (javaCalls.cpp:61)
guarantee(thread->can_call_java()) failed
- S8217786: Provide virtualization related info in the hs_error file
on linux s390x
- S8217878: ENVELOPING XML signature no longer works in JDK 11
- S8217879: hs_err should print more instructions in hex dump
- S8217880: AIX build issue after JDK-8214533
- S8218020: Fix version number in mesa.md 3rd party legal file
- S8218060: JDK-8217786 breaks build due to remaining unused function
- S8218063: JDK-8218060 breaks build for S390
- S8218152: [javac] fails and exits with no error if a bad annotation
processor provided
- S8218469: JSlider display issue with slider for GTKLookAndFeel
- S8218470: JScrollBar display issue with GTKLookAndFeel
- S8218472: JProgressBar display issue with GTKLookAndFeel
- S8218473: JOptionPane display issue with GTKLookAndFeel
- S8218479: JTextPane display issue with GTKLookAndFeel
- S8218618: Program fails when using JDK addressed by UNC path and
using Security Manager
- S8218629: XML Digital Signature throws NAMESPACE_ERR exception on
OpenJDK 11, works 8/9/10
- S8218674: HTML Tooltip with "img=src" on component doesn't show
- S8218733: SA: CollectedHeap provides broken implementation for
used() and capacity()
- S8218781: Localized names for Japanese era Reiwa in COMPAT provider
- S8218811: replace open by os::open in hotspot coding
- S8218854: FontMetrics.getMaxAdvance may be less than the maximum
FontMetrics.charWidth
- S8218960: CONFIG level logging statements printed in
CLDRCalendarDataProviderImpl.java even when default log Level is INFO
- S8218991: s390: Add intrinsic for GHASH algorithm
- S8219006: AArch64: Register corruption in slow subtype check
- S8219011: Implement MacroAssembler::warn method on AArch64
- S8219112: name_and_sig_as_C_string usages in frame_s390 miss
ResourceMark
- S8219335: "failed: unexpected type" assert failure in
ConnectionGraph::split_unique_types() with unsafe accesses
- S8219389: Delegated task created by SSLEngine throws
BufferUnderflowException
- S8219414: SA: jhsdb jsnap throws UnmappedAddressException with core
generated by gcore
- S8219448: split-if update_uses accesses stale idom data
- S8219460: ppc: adjust NativeGeneralJump::insert_unconditional to
stack allocated MacroAssembler
- S8219566: JFR did not collect call stacks when
MaxJavaStackTraceDepth is set to zero
- S8219574: Minimal VM build failure after JDK-8219414
- S8219582: PPC: Crash after C1 checkcast patched and GC
- S8219584: Try to dump error file by thread which causes safepoint
timeout
- S8219698: aarch64: SIGILL triggered when specifying unsupported
hardware features
- S8219710: Bump update version for OpenJDK: jdk11.0.4
- S8219746: Provide virtualization related info in the hs_error file
on linux ppc64 / ppc64le
- S8219915: [TESTBUG] Fix test
langtools/tools/javac/processing/model/completionfailure/SymbolsDontCumulate.java
in Standalone mode
- S8219918: ProblemList hotspot tests failing in SAP testing.
- S8220165: Encryption using GCM results in RuntimeException- input
length out of bound
- S8220166: Performance regression in deserialization (4-6% in SPECjbb)
- S8220198: Lots of com/sun/crypto/provider/Cipher tests fail on
x86_32 due to missing SHA512 stubs
- S8220281: IBM-858 alias name is missing on IBM00858 charset
- S8220293: Deadlock in JFR string pool
- S8220349: The fix done for JDK-8214253 have caused issues in JTree
behaviour
- S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot without
UnlockDiagnosticVMOptions
- S8220374: C2: LoopStripMining doesn't strip as expected
- S8220441: [PPC64] Clobber memory effect missing for memory barriers
in atomics
- S8220495: Update GIFlib library to the 5.1.8
- S8220513: Wrapper Key may get deleted when closing sessions in
SunPKCS11 crypto provider
- S8220625: tools/javac/classreader/8171132/BadConstantValue.java
failed with "did not see expected error"
- S8220707: [TESTBUG] serviceability/sa/TestHeapDumpForLargeArray.java
fails with jtreg -vmoption:-Xmx < 8g
- S8220714: C2 Compilation failure when accessing off-heap memory
using Unsafe
- S8220718: Missing ResourceMark in nmethod::metadata_do
- S8220781: linux-s390 : os::get_summary_cpu_info gives bad output
- S8220794: PPC64: Fix signal handler for SIGSEGV on branch to illegal
address
- S8221083: [ppc64] Wrong oop compare in C1-generated code
- S8221175: Fix bad function case for controlled JVM crash on PPC64
big-endian
- S8221244: Unexpected behavior of PropertyDescription.getReadMethod
for boolean properties
- S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard to use
- S8221304: Problem list java/awt/FontMetrics/MaxAdvanceIsMax.java
- S8221400: java/lang/String/StringRepeat.java test requests too much heap
- S8221401: java/math/BigInteger/LargeValueExceptions.java test should
be disabled on 32-bit platforms
- S8221412: lookupPrintServices() does not always update the list of
Windows remote printers
- S8221437:
assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
== m()) failed: Should not change after link resolution
- S8221470: Print methods in exception messages in java-like Syntax.
- S8221479: Fix JFR profiling on s390
- S8221483: TestOopCmp.java fails due to "Multiple garbage collectors
selected"
- S8221535: add steal tick related information to hs_error file [linux]
- S8221610: Resurrect (legacy) JRE bundle target
- S8221639: [i386] expand_exec_shield_cs_limit workaround is undefined
code after JDK-8199717
- S8221833: Readability check in Symbol::is_valid not performed for
some addresses
- S8221870: use driver to run CtwRunner in applications/ctw tests
- S8221880: Better customization for Windows RC properties
FileDescription and ProductName
- S8221915: cleanup ticks related coding in os_perf_aix.cpp [aix]
- S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit platforms
- S8221924: get(null) on single-entry unmodifiable Map returns null
instead of throwing NPE
- S8222027: java/util/logging/LogManager/TestLoggerNames.java
generates intermittent ClassCastException
- S8222032: x86_32 fails with "wrong size of mach node" on AVX-512 machine
- S8222089: [TESTBUG] sun/security/lib/cacerts/VerifyCACerts.java
fails due to cert within 90-day expiry window
- S8222133: Add temporary exceptions for root certs that are due to
expire soon
- S8222136: Remove two Comodo root CA certificates that are expiring
- S8222137: Remove T-Systems root CA certificate
- S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to garbled
registers
- S8222410:
java/nio/file/attribute/BasicFileAttributeView/UnixSocketFile hangs when
"nc" does not accept "-U"
- S8222522: Add configure options for Mac Bundle creation
- S8222532: (zipfs) Performance regression when writing ZipFileSystem
entries in parallel
- S8222913: Add Jib support for VERSION_EXTRA*
- S8222930: ConcurrentSkipListMap.clone() shares size variable between
original and clone
- S8223266: PPC64: Check for branch to illegal address before checking
for mem serialization
- S8223395: PPC64: Improve comments in the JVM signal handler to match
ISA text
- S8223499: Remove two DocuSign root certificates that are expiring
- S8223555: Cleanups in cacerts tests
- S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
CHECK_FAILED! (getAttribute.crc <entries20> failed 6af4413c vs 0 ...)
- S8223665: SA: debugd options should follow jhsdb style
- S8224474: harfbuzz 2.3.1 code fails to compile with gcc 4.4.7
- S8224671: AArch64: mauve System.arraycopy test failure
- S8224727: Problem list test
security/infra/java/security/cert/CertPathValidator/certification/ActalisCA.java
- S8224828: aarch64: rflags is not correct after safepoint poll
- S8224880: AArch64: java/javac error with AllocatePrefetchDistance
- S8225402: events logging in deoptimization.cpp should go to deopt-log
- S8225716: G1 GC: Undefined behaviour in
G1BlockOffsetTablePart::block_at_or_preceding
- S8226876: Assertion in sun/util/locale/provider/CalendarDataUtility
on Windows after JDK-8218960
- S8226880: Backport of JDK-8208698 (Improved ECC Implementation)
should not bring parts of JDK-8205476 (KeyAgreement#generateSecret is
not reset for ECDH based algorithm)
--
Andrew :)
Senior Free Java Software Engineer
Red Hat, Inc. (http://www.redhat.com)
PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222
https://keybase.io/gnu_andrew
More information about the jdk-updates-dev
mailing list