OpenJDK 11.0.4 Released

Lindenmaier, Goetz goetz.lindenmaier at sap.com
Wed Jul 17 10:26:55 UTC 2019


Hi Andrew,

Thanks for porting the closed changes and 
pushing them such timely again!
Great job!

Best regards,
  Götz

> Am 17.07.2019 um 05:46 schrieb Andrew John Hughes <gnu.andrew at redhat.com>:
> 
> We are pleased to announce the release of OpenJDK 11.0.4.
> 
> The source tarball is available from:
> 
> * https://openjdk-sources.osci.io/openjdk11/openjdk-11.0.4+11.tar.xz
> 
> The tarball is accompanied by a digital signature available at:
> 
> * https://openjdk-sources.osci.io/openjdk11/openjdk-11.0.4+11.tar.xz.sig
> 
> This is signed by our Red Hat OpenJDK key (openjdk at redhat.com):
> 
> PGP Key: rsa4096/0x92EF8D39DC13168F (hkp://keys.gnupg.net)
> Fingerprint = CA5F 11C6 CE22 644D 42C6  AC44 92EF 8D39 DC13 168F
> 
> SHA256 checksums:
> 
> d138f10168e4929ed992be99c2059b0ea46c648e1b0080ce1c44a526e498fc05
> openjdk-11.0.4+11.tar.xz
> afdd3f4c7cc9ad8e8e96a6929c51dfff83d41958bb004618e7bea43a1fd7d939
> openjdk-11.0.4+11.tar.xz.sig
> 
> The checksums can be downloaded from:
> 
> * https://openjdk-sources.osci.io/openjdk11/openjdk-11.0.4+11.sha256
> 
> What's New?
> ===========
> * Security fixes
>  - S8208698, CVE-2019-2745: Improved ECC Implementation
>  - S8212328, CVE-2019-2762: Exceptional throw cases
>  - S8213431, CVE-2019-2766: Improve file protocol handling
>  - S8213432, CVE-2019-2769: Better copies of CopiesList
>  - S8216381, CVE-2019-2786: More limited privilege usage
>  - S8217563: Improve realm maintenance
>  - S8218863: Better endpoint checks
>  - S8218873: Improve JSSE endpoint checking
>  - S8218876, CVE-2019-7317: Improve PNG support options
>  - S8219775: Certificate validation improvements
>  - S8220517: Enhanced GIF support
>  - S8221345, CVE-2019-2818: Better Poly1305 support
>  - S8221518, CVE-2019-2816: Normalize normalization
>  - S8222678, CVE-2019-2821: Improve TLS negotiation
> * Other fixes
>  - S6913047: Long term memory leak when using PKCS11 and JCE exceeds 32
> bit process address space
>  - S8139178: Wrong fontMetrics when printing in Landscape (OpenJDK)
>  - S8163805: hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java
> failed with timed out
>  - S8170494: JNI exception pending in PlainDatagramSocketImpl.c
>  - S8174691: [TESTBUG] A number of native hotspot unit tests fail when
> executed in stand-alone mode
>  - S8179098: Crypto AES/ECB encryption/decryption performance
> regression (introduced in jdk9b73)
>  - S8181143: Introduce diagnostic flag to abort VM on too long VM
> operations
>  - S8188133: C2: Static field accesses in clinit can trigger
> deoptimizations
>  - S8190361: Incorrect version info in jaccessinspector.exe and
> jaccesswalker.exe
>  - S8195793: Remove GTE CyberTrust Global Root
>  - S8200286: (testbug) MOptionTest test fails with
> java.lang.AssertionError: Classfiles too old!
>  - S8200613: SA: jstack throws UnmappedAddressException with a CDS core
> file
>  - S8201317: X25519/X448 code improvements
>  - S8201633: Problems with AES-GCM native acceleration
>  - S8202353: os::readdir should use readdir instead of readdir_r
>  - S8202414: Unsafe write after primitive array creation may result in
> array length change
>  - S8202651: Test ComodoCA.java fails
>  - S8202794: Native Unix code should use readdir rather than readdir_r
>  - S8202884: SA: Attach/detach might fail on Linux if debugee
> application create/destroy threads during attaching
>  - S8203627: Swing applications with JRadioButton and JCheckbox fail to
> render correctly when using GTK3 and the GTK L&F
>  - S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java fails
> when running in CDS mode
>  - S8205574: Loop predication "assert(f <= 1 && f >= 0) failed
> Incorrect frequency"
>  - S8205611: Improve the wording of LinkageErrors to include module and
> class loader information
>  - S8206955: MethodHandleProxies.asInterfaceInstance does not support
> default methods
>  - S8207340: (fs) UnixNativeDispatcher close and readdir usages should
> be fixed
>  - S8207748: Fix for 8202794 breaks tier1 builds
>  - S8207760: SAXException: Invalid UTF-16 surrogate detected: d83c ?
>  - S8208634: Add x-IBM-1129 charset
>  - S8208648: ECC Field Arithmetic Enhancements
>  - S8208702:
> javax/swing/reliability/HangDuringStaticInitialization.java may hang on
> macos
>  - S8208996: X11 icon window color handing bug
>  - S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler seems to
> use WeakHashMap incorrectly
>  - S8209414: AArch64: method handle invocation does not respect JVMTI
> interp_only mode
>  - S8209415: Fix JVMTI test failure HS202
>  - S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry on failure
>  - S8209914: javadoc search sometimes generates bad URIs
>  - S8209951: Problematic sparc intrinsic:
> com.sun.crypto.provider.CipherBlockChaining
>  - S8210008: custom extension for make/SourceRevision.gmk
>  - S8210197: javac can't tell during speculative attribution if a
> diamond expression is creating an anonymous inner class or not
>  - S8210283: Support git as an SCM alternative in the build
>  - S8210320: PPC64: Fix uninitialized variable in C1 LIR assembler code
>  - S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
>  - S8210483: AssertionError in DeferredAttr at setOverloadKind caused
> by JDK-8203679
>  - S8210519: build/releaseFile/CheckSource.java failed additional
> sources found
>  - S8210739: Calling JSpinner's setFont with null throws
> NullPointerException
>  - S8210782: Upgrade HarfBuzz to the latest 2.3.1
>  - S8210803: Compilation failure in codeBlob.cpp for Windows 32-bit
>  - S8210837: Add libXrandr-devel to the Linux devkits
>  - S8210863: Remove Xrandr include files from JDK sources
>  - S8210880: Remove HPKeysym.h from JDK sources
>  - S8210886: Remove references in xwindows.md to non-existent files.
>  - S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32 mistakenly
> set the crc32 value into size field
>  - S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
> ZipFSTester.checkRead(): bound must be positive
>  - S8211350: Remove jprt support
>  - S8211393: Memory leak issue on awt_InputMethod.c
>  - S8211435: Exception in thread "AWT-EventQueue-1"
> java.lang.IllegalArgumentException: null source
>  - S8211698: Crash in C2 compiled code during execution of double array
> heavy processing code
>  - S8211810: X11 Time stamp data should be unsigned
>  - S8211826: StringIndexOutOfBoundsException happens via
> GetStringUTFRegion()
>  - S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not compile (aix)
>  - S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java searching
> for wrong paths
>  - S8211971: Move security/cacerts/VerifyCACerts.java and
> security/CheckBlacklistedCerts.java
>  - S8212202: [Windows] Exception if no printers are installed.
>  - S8212205: VM asserts after CDS archive has been unmapped
>  - S8212562: To remove lib/security from test/jdk/TEST.groups
>  - S8212676: AWT SystemColor setting on CDE
>  - S8212677: X11 default visual support for IM status window on VNC
>  - S8212678: Windows IME related patch
>  - S8212794: IBM-964 is required for AIX default charset
>  - S8212828: (process) Provide a way for Runtime.exec to use
> posix_spawn on linux
>  - S8213015: Inconsistent settings between JFR.configure and
> -XX:FlightRecorderOptions
>  - S8213213: Remove src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
>  - S8213232: Unix/X11 setCompositionEnableNative issue
>  - S8213292: Input freezes after MacOS key-selector (press&hold) usage
> on macOS Mojave
>  - S8213294: Upgrade IANA LSR data
>  - S8213515: Improve freetype detection on linux/ppc64/ppc64le/s390x
>  - S8213614: DnD operation change feature does not work with 64bit big
> endian CPU
>  - S8213617: JFR should record the PID of the recorded process
>  - S8213618: IBM970 charset has missing entry and remove unexpected entries
>  - S8213825: assert(false) failed: Non-balanced monitor enter/exit!
> Likely JNI locking
>  - S8213944: Fix AIX build after the removal of Xrandr.h and add a
> configure check for it
>  - S8214002: Cannot use italic font style if the font has embedded bitmap
>  - S8214109: XToolkit is not correctly displayed color on 16-bit high
> color setting
>  - S8214111: There is no icon in all JOptionPane target image
>  - S8214112: The whole text in target JPasswordField image are not selected
>  - S8214252: Expanded & Collapsed nodes of a JTree look the same on GTK3
>  - S8214253: Tooltip is transparent rather than having a black background
>  - S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
>  - S8214533: IBM-29626C is required for AIX default charset
>  - S8214765: All TrayIcon MessageType icons does not show up with gtk3
> option set
>  - S8214935: Upgrade IANA LSR data
>  - S8215026: Incorrect amount of memory unmapped with
> ImageFileReader::close()
>  - S8215123: Crash in runtime image built with jlink --compress=2
>  - S8215284: Reduce noise induced by periodic task getFileSize()
>  - S8215296: do not disable c99 on Solaris
>  - S8215342: [Zero] Build fails after JDK-8200613
>  - S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while using
> Swing-FX interop
>  - S8215374: 32-bit build failures after JDK-8181143 (Introduce
> diagnostic flag to abort VM on too long VM operations)
>  - S8215398: -Xlog option usage => Invalid decorator '\temp\app_cds.log'.
>  - S8215443: The use of TransportContext.fatal() leads to bad coding style
>  - S8215472: (zipfs) Cleanups in implementation classes of jdk.zipfs
> and tests
>  - S8215707: [macosx] fix pthread_getschedparam and
> pthread_setschedparam calls
>  - S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate() computes
> wrong IDOM
>  - S8215790: Delegated task created by SSLEngine throws
> java.nio.BufferUnderflowException
>  - S8216045: The size of key_exchange may be wrong on FFDHE
>  - S8216355: missing NULL checks in libnet in interface iteration and
> potential resource leak in getMacAddress
>  - S8216556: Unnecessary liveness computation with JVMTI
>  - S8216577: Add GlobalSign's R6 Root certificate
>  - S8216597: SIGBUS in
> Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after JDK-6913047
>  - S8216970: condy causes JVM crash
>  - S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak) after
> JDK-8216597 (SIGBUS error in getNativeKeyInfo)
>  - S8217094: HttpClient SSL race if a socket IOException is raised
> before ALPN is available
>  - S8217263: Automate DashOffset test
>  - S8217311: Improve Exception thrown when MulticastSocket.setInterface
> fails on AIX(Unix)
>  - S8217564: idempotent protection missing in crc32c.h
>  - S8217647: JFR: recordings on 32-bit systems unreadable
>  - S8217690: Update public suffix version
>  - S8217707: JNICALL declaration breaks Splash screen functions
>  - S8217765: Internal Error (javaCalls.cpp:61)
> guarantee(thread->can_call_java()) failed
>  - S8217786: Provide virtualization related info in the hs_error file
> on linux s390x
>  - S8217878: ENVELOPING XML signature no longer works in JDK 11
>  - S8217879: hs_err should print more instructions in hex dump
>  - S8217880: AIX build issue after JDK-8214533
>  - S8218020: Fix version number in mesa.md 3rd party legal file
>  - S8218060: JDK-8217786 breaks build due to remaining unused function
>  - S8218063: JDK-8218060 breaks build for S390
>  - S8218152: [javac] fails and exits with no error if a bad annotation
> processor provided
>  - S8218469: JSlider display issue with slider for GTKLookAndFeel
>  - S8218470: JScrollBar display issue with GTKLookAndFeel
>  - S8218472: JProgressBar display issue with GTKLookAndFeel
>  - S8218473: JOptionPane display issue with GTKLookAndFeel
>  - S8218479: JTextPane display issue with GTKLookAndFeel
>  - S8218618: Program fails when using JDK addressed by UNC path and
> using Security Manager
>  - S8218629: XML Digital Signature throws NAMESPACE_ERR exception on
> OpenJDK 11, works 8/9/10
>  - S8218674: HTML Tooltip with "img=src" on component doesn't show
>  - S8218733: SA: CollectedHeap provides broken implementation for
> used() and capacity()
>  - S8218781: Localized names for Japanese era Reiwa in COMPAT provider
>  - S8218811: replace open by os::open in hotspot coding
>  - S8218854: FontMetrics.getMaxAdvance may be less than the maximum
> FontMetrics.charWidth
>  - S8218960: CONFIG level logging statements printed in
> CLDRCalendarDataProviderImpl.java even when default log Level is INFO
>  - S8218991: s390: Add intrinsic for GHASH algorithm
>  - S8219006: AArch64: Register corruption in slow subtype check
>  - S8219011: Implement MacroAssembler::warn method on AArch64
>  - S8219112: name_and_sig_as_C_string usages in frame_s390 miss
> ResourceMark
>  - S8219335: "failed: unexpected type" assert failure in
> ConnectionGraph::split_unique_types() with unsafe accesses
>  - S8219389: Delegated task created by SSLEngine throws
> BufferUnderflowException
>  - S8219414: SA: jhsdb jsnap throws UnmappedAddressException with core
> generated by gcore
>  - S8219448: split-if update_uses accesses stale idom data
>  - S8219460: ppc: adjust NativeGeneralJump::insert_unconditional to
> stack allocated MacroAssembler
>  - S8219566: JFR did not collect call stacks when
> MaxJavaStackTraceDepth is set to zero
>  - S8219574: Minimal VM build failure after JDK-8219414
>  - S8219582: PPC: Crash after C1 checkcast patched and GC
>  - S8219584: Try to dump error file by thread which causes safepoint
> timeout
>  - S8219698: aarch64: SIGILL triggered when specifying unsupported
> hardware features
>  - S8219710: Bump update version for OpenJDK: jdk11.0.4
>  - S8219746: Provide virtualization related info in the hs_error file
> on linux ppc64 / ppc64le
> 
>  - S8219915: [TESTBUG] Fix test
> langtools/tools/javac/processing/model/completionfailure/SymbolsDontCumulate.java
> in Standalone mode
>  - S8219918: ProblemList hotspot tests failing in SAP testing.
>  - S8220165: Encryption using GCM results in RuntimeException- input
> length out of bound
>  - S8220166: Performance regression in deserialization (4-6% in SPECjbb)
>  - S8220198: Lots of com/sun/crypto/provider/Cipher tests fail on
> x86_32 due to missing SHA512 stubs
>  - S8220281: IBM-858 alias name is missing on IBM00858 charset
>  - S8220293: Deadlock in JFR string pool
>  - S8220349: The fix done for JDK-8214253 have caused issues in JTree
> behaviour
>  - S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot without
> UnlockDiagnosticVMOptions
>  - S8220374: C2: LoopStripMining doesn't strip as expected
>  - S8220441: [PPC64] Clobber memory effect missing for memory barriers
> in atomics
>  - S8220495: Update GIFlib library to the 5.1.8
>  - S8220513: Wrapper Key may get deleted when closing sessions in
> SunPKCS11 crypto provider
>  - S8220625: tools/javac/classreader/8171132/BadConstantValue.java
> failed with "did not see expected error"
>  - S8220707: [TESTBUG] serviceability/sa/TestHeapDumpForLargeArray.java
> fails with jtreg -vmoption:-Xmx < 8g
>  - S8220714: C2 Compilation failure when accessing off-heap memory
> using Unsafe
>  - S8220718: Missing ResourceMark in nmethod::metadata_do
>  - S8220781: linux-s390 : os::get_summary_cpu_info gives bad output
>  - S8220794: PPC64: Fix signal handler for SIGSEGV on branch to illegal
> address
>  - S8221083: [ppc64] Wrong oop compare in C1-generated code
>  - S8221175: Fix bad function case for controlled JVM crash on PPC64
> big-endian
>  - S8221244: Unexpected behavior of PropertyDescription.getReadMethod
> for boolean properties
>  - S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard to use
>  - S8221304: Problem list java/awt/FontMetrics/MaxAdvanceIsMax.java
>  - S8221400: java/lang/String/StringRepeat.java test requests too much heap
>  - S8221401: java/math/BigInteger/LargeValueExceptions.java test should
> be disabled on 32-bit platforms
>  - S8221412: lookupPrintServices() does not always update the list of
> Windows remote printers
>  - S8221437:
> assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
> == m()) failed: Should not change after link resolution
>  - S8221470: Print methods in exception messages in java-like Syntax.
>  - S8221479: Fix JFR profiling on s390
>  - S8221483: TestOopCmp.java fails due to "Multiple garbage collectors
> selected"
>  - S8221535: add steal tick related information to hs_error file [linux]
>  - S8221610: Resurrect (legacy) JRE bundle target
>  - S8221639: [i386] expand_exec_shield_cs_limit workaround is undefined
> code after JDK-8199717
>  - S8221833: Readability check in Symbol::is_valid not performed for
> some addresses
>  - S8221870: use driver to run CtwRunner in applications/ctw tests
>  - S8221880: Better customization for Windows RC properties
> FileDescription and ProductName
>  - S8221915: cleanup ticks related coding in os_perf_aix.cpp [aix]
>  - S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit platforms
>  - S8221924: get(null) on single-entry unmodifiable Map returns null
> instead of throwing NPE
>  - S8222027: java/util/logging/LogManager/TestLoggerNames.java
> generates intermittent ClassCastException
>  - S8222032: x86_32 fails with "wrong size of mach node" on AVX-512 machine
>  - S8222089: [TESTBUG] sun/security/lib/cacerts/VerifyCACerts.java
> fails due to cert within 90-day expiry window
>  - S8222133: Add temporary exceptions for root certs that are due to
> expire soon
>  - S8222136: Remove two Comodo root CA certificates that are expiring
>  - S8222137: Remove T-Systems root CA certificate
>  - S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to garbled
> registers
>  - S8222410:
> java/nio/file/attribute/BasicFileAttributeView/UnixSocketFile hangs when
> "nc" does not accept "-U"
>  - S8222522: Add configure options for Mac Bundle creation
>  - S8222532: (zipfs) Performance regression when writing ZipFileSystem
> entries in parallel
>  - S8222913: Add Jib support for VERSION_EXTRA*
>  - S8222930: ConcurrentSkipListMap.clone() shares size variable between
> original and clone
>  - S8223266: PPC64: Check for branch to illegal address before checking
> for mem serialization
>  - S8223395: PPC64: Improve comments in the JVM signal handler to match
> ISA text
>  - S8223499: Remove two DocuSign root certificates that are expiring
>  - S8223555: Cleanups in cacerts tests
>  - S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
> CHECK_FAILED! (getAttribute.crc <entries20> failed 6af4413c vs 0 ...)
>  - S8223665: SA: debugd options should follow jhsdb style
>  - S8224474: harfbuzz 2.3.1 code fails to compile with gcc 4.4.7
>  - S8224671: AArch64: mauve System.arraycopy test failure
>  - S8224727: Problem list test
> security/infra/java/security/cert/CertPathValidator/certification/ActalisCA.java
>  - S8224828: aarch64: rflags is not correct after safepoint poll
>  - S8224880: AArch64: java/javac error with AllocatePrefetchDistance
>  - S8225402: events logging in deoptimization.cpp should go to deopt-log
>  - S8225716: G1 GC: Undefined behaviour in
> G1BlockOffsetTablePart::block_at_or_preceding
>  - S8226876: Assertion in sun/util/locale/provider/CalendarDataUtility
> on Windows after JDK-8218960
>  - S8226880: Backport of JDK-8208698 (Improved ECC Implementation)
> should not bring parts of JDK-8205476 (KeyAgreement#generateSecret is
> not reset for ECDH based algorithm)
> 
> -- 
> Andrew :)
> 
> Senior Free Java Software Engineer
> Red Hat, Inc. (http://www.redhat.com)
> 
> PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
> Fingerprint = 5132 579D D154 0ED2 3E04  C5A0 CFDA 0F9B 3596 4222
> https://keybase.io/gnu_andrew
> 


More information about the jdk-updates-dev mailing list