OpenJDK 11.0.4 Released

Mario Torre neugens at redhat.com
Wed Jul 17 10:51:52 UTC 2019


On 17/07/2019 12:26, Lindenmaier, Goetz wrote:
> Hi Andrew,
> 
> Thanks for porting the closed changes and 
> pushing them such timely again!
> Great job!

Yes, thanks!

Cheers,
Mario

> Best regards,
>   Götz
> 
>> Am 17.07.2019 um 05:46 schrieb Andrew John Hughes <gnu.andrew at redhat.com>:
>>
>> We are pleased to announce the release of OpenJDK 11.0.4.
>>
>> The source tarball is available from:
>>
>> * https://openjdk-sources.osci.io/openjdk11/openjdk-11.0.4+11.tar.xz
>>
>> The tarball is accompanied by a digital signature available at:
>>
>> * https://openjdk-sources.osci.io/openjdk11/openjdk-11.0.4+11.tar.xz.sig
>>
>> This is signed by our Red Hat OpenJDK key (openjdk at redhat.com):
>>
>> PGP Key: rsa4096/0x92EF8D39DC13168F (hkp://keys.gnupg.net)
>> Fingerprint = CA5F 11C6 CE22 644D 42C6  AC44 92EF 8D39 DC13 168F
>>
>> SHA256 checksums:
>>
>> d138f10168e4929ed992be99c2059b0ea46c648e1b0080ce1c44a526e498fc05
>> openjdk-11.0.4+11.tar.xz
>> afdd3f4c7cc9ad8e8e96a6929c51dfff83d41958bb004618e7bea43a1fd7d939
>> openjdk-11.0.4+11.tar.xz.sig
>>
>> The checksums can be downloaded from:
>>
>> * https://openjdk-sources.osci.io/openjdk11/openjdk-11.0.4+11.sha256
>>
>> What's New?
>> ===========
>> * Security fixes
>>  - S8208698, CVE-2019-2745: Improved ECC Implementation
>>  - S8212328, CVE-2019-2762: Exceptional throw cases
>>  - S8213431, CVE-2019-2766: Improve file protocol handling
>>  - S8213432, CVE-2019-2769: Better copies of CopiesList
>>  - S8216381, CVE-2019-2786: More limited privilege usage
>>  - S8217563: Improve realm maintenance
>>  - S8218863: Better endpoint checks
>>  - S8218873: Improve JSSE endpoint checking
>>  - S8218876, CVE-2019-7317: Improve PNG support options
>>  - S8219775: Certificate validation improvements
>>  - S8220517: Enhanced GIF support
>>  - S8221345, CVE-2019-2818: Better Poly1305 support
>>  - S8221518, CVE-2019-2816: Normalize normalization
>>  - S8222678, CVE-2019-2821: Improve TLS negotiation
>> * Other fixes
>>  - S6913047: Long term memory leak when using PKCS11 and JCE exceeds 32
>> bit process address space
>>  - S8139178: Wrong fontMetrics when printing in Landscape (OpenJDK)
>>  - S8163805: hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java
>> failed with timed out
>>  - S8170494: JNI exception pending in PlainDatagramSocketImpl.c
>>  - S8174691: [TESTBUG] A number of native hotspot unit tests fail when
>> executed in stand-alone mode
>>  - S8179098: Crypto AES/ECB encryption/decryption performance
>> regression (introduced in jdk9b73)
>>  - S8181143: Introduce diagnostic flag to abort VM on too long VM
>> operations
>>  - S8188133: C2: Static field accesses in clinit can trigger
>> deoptimizations
>>  - S8190361: Incorrect version info in jaccessinspector.exe and
>> jaccesswalker.exe
>>  - S8195793: Remove GTE CyberTrust Global Root
>>  - S8200286: (testbug) MOptionTest test fails with
>> java.lang.AssertionError: Classfiles too old!
>>  - S8200613: SA: jstack throws UnmappedAddressException with a CDS core
>> file
>>  - S8201317: X25519/X448 code improvements
>>  - S8201633: Problems with AES-GCM native acceleration
>>  - S8202353: os::readdir should use readdir instead of readdir_r
>>  - S8202414: Unsafe write after primitive array creation may result in
>> array length change
>>  - S8202651: Test ComodoCA.java fails
>>  - S8202794: Native Unix code should use readdir rather than readdir_r
>>  - S8202884: SA: Attach/detach might fail on Linux if debugee
>> application create/destroy threads during attaching
>>  - S8203627: Swing applications with JRadioButton and JCheckbox fail to
>> render correctly when using GTK3 and the GTK L&F
>>  - S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java fails
>> when running in CDS mode
>>  - S8205574: Loop predication "assert(f <= 1 && f >= 0) failed
>> Incorrect frequency"
>>  - S8205611: Improve the wording of LinkageErrors to include module and
>> class loader information
>>  - S8206955: MethodHandleProxies.asInterfaceInstance does not support
>> default methods
>>  - S8207340: (fs) UnixNativeDispatcher close and readdir usages should
>> be fixed
>>  - S8207748: Fix for 8202794 breaks tier1 builds
>>  - S8207760: SAXException: Invalid UTF-16 surrogate detected: d83c ?
>>  - S8208634: Add x-IBM-1129 charset
>>  - S8208648: ECC Field Arithmetic Enhancements
>>  - S8208702:
>> javax/swing/reliability/HangDuringStaticInitialization.java may hang on
>> macos
>>  - S8208996: X11 icon window color handing bug
>>  - S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler seems to
>> use WeakHashMap incorrectly
>>  - S8209414: AArch64: method handle invocation does not respect JVMTI
>> interp_only mode
>>  - S8209415: Fix JVMTI test failure HS202
>>  - S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry on failure
>>  - S8209914: javadoc search sometimes generates bad URIs
>>  - S8209951: Problematic sparc intrinsic:
>> com.sun.crypto.provider.CipherBlockChaining
>>  - S8210008: custom extension for make/SourceRevision.gmk
>>  - S8210197: javac can't tell during speculative attribution if a
>> diamond expression is creating an anonymous inner class or not
>>  - S8210283: Support git as an SCM alternative in the build
>>  - S8210320: PPC64: Fix uninitialized variable in C1 LIR assembler code
>>  - S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
>>  - S8210483: AssertionError in DeferredAttr at setOverloadKind caused
>> by JDK-8203679
>>  - S8210519: build/releaseFile/CheckSource.java failed additional
>> sources found
>>  - S8210739: Calling JSpinner's setFont with null throws
>> NullPointerException
>>  - S8210782: Upgrade HarfBuzz to the latest 2.3.1
>>  - S8210803: Compilation failure in codeBlob.cpp for Windows 32-bit
>>  - S8210837: Add libXrandr-devel to the Linux devkits
>>  - S8210863: Remove Xrandr include files from JDK sources
>>  - S8210880: Remove HPKeysym.h from JDK sources
>>  - S8210886: Remove references in xwindows.md to non-existent files.
>>  - S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32 mistakenly
>> set the crc32 value into size field
>>  - S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
>> ZipFSTester.checkRead(): bound must be positive
>>  - S8211350: Remove jprt support
>>  - S8211393: Memory leak issue on awt_InputMethod.c
>>  - S8211435: Exception in thread "AWT-EventQueue-1"
>> java.lang.IllegalArgumentException: null source
>>  - S8211698: Crash in C2 compiled code during execution of double array
>> heavy processing code
>>  - S8211810: X11 Time stamp data should be unsigned
>>  - S8211826: StringIndexOutOfBoundsException happens via
>> GetStringUTFRegion()
>>  - S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not compile (aix)
>>  - S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java searching
>> for wrong paths
>>  - S8211971: Move security/cacerts/VerifyCACerts.java and
>> security/CheckBlacklistedCerts.java
>>  - S8212202: [Windows] Exception if no printers are installed.
>>  - S8212205: VM asserts after CDS archive has been unmapped
>>  - S8212562: To remove lib/security from test/jdk/TEST.groups
>>  - S8212676: AWT SystemColor setting on CDE
>>  - S8212677: X11 default visual support for IM status window on VNC
>>  - S8212678: Windows IME related patch
>>  - S8212794: IBM-964 is required for AIX default charset
>>  - S8212828: (process) Provide a way for Runtime.exec to use
>> posix_spawn on linux
>>  - S8213015: Inconsistent settings between JFR.configure and
>> -XX:FlightRecorderOptions
>>  - S8213213: Remove src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
>>  - S8213232: Unix/X11 setCompositionEnableNative issue
>>  - S8213292: Input freezes after MacOS key-selector (press&hold) usage
>> on macOS Mojave
>>  - S8213294: Upgrade IANA LSR data
>>  - S8213515: Improve freetype detection on linux/ppc64/ppc64le/s390x
>>  - S8213614: DnD operation change feature does not work with 64bit big
>> endian CPU
>>  - S8213617: JFR should record the PID of the recorded process
>>  - S8213618: IBM970 charset has missing entry and remove unexpected entries
>>  - S8213825: assert(false) failed: Non-balanced monitor enter/exit!
>> Likely JNI locking
>>  - S8213944: Fix AIX build after the removal of Xrandr.h and add a
>> configure check for it
>>  - S8214002: Cannot use italic font style if the font has embedded bitmap
>>  - S8214109: XToolkit is not correctly displayed color on 16-bit high
>> color setting
>>  - S8214111: There is no icon in all JOptionPane target image
>>  - S8214112: The whole text in target JPasswordField image are not selected
>>  - S8214252: Expanded & Collapsed nodes of a JTree look the same on GTK3
>>  - S8214253: Tooltip is transparent rather than having a black background
>>  - S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
>>  - S8214533: IBM-29626C is required for AIX default charset
>>  - S8214765: All TrayIcon MessageType icons does not show up with gtk3
>> option set
>>  - S8214935: Upgrade IANA LSR data
>>  - S8215026: Incorrect amount of memory unmapped with
>> ImageFileReader::close()
>>  - S8215123: Crash in runtime image built with jlink --compress=2
>>  - S8215284: Reduce noise induced by periodic task getFileSize()
>>  - S8215296: do not disable c99 on Solaris
>>  - S8215342: [Zero] Build fails after JDK-8200613
>>  - S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while using
>> Swing-FX interop
>>  - S8215374: 32-bit build failures after JDK-8181143 (Introduce
>> diagnostic flag to abort VM on too long VM operations)
>>  - S8215398: -Xlog option usage => Invalid decorator '\temp\app_cds.log'.
>>  - S8215443: The use of TransportContext.fatal() leads to bad coding style
>>  - S8215472: (zipfs) Cleanups in implementation classes of jdk.zipfs
>> and tests
>>  - S8215707: [macosx] fix pthread_getschedparam and
>> pthread_setschedparam calls
>>  - S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate() computes
>> wrong IDOM
>>  - S8215790: Delegated task created by SSLEngine throws
>> java.nio.BufferUnderflowException
>>  - S8216045: The size of key_exchange may be wrong on FFDHE
>>  - S8216355: missing NULL checks in libnet in interface iteration and
>> potential resource leak in getMacAddress
>>  - S8216556: Unnecessary liveness computation with JVMTI
>>  - S8216577: Add GlobalSign's R6 Root certificate
>>  - S8216597: SIGBUS in
>> Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after JDK-6913047
>>  - S8216970: condy causes JVM crash
>>  - S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak) after
>> JDK-8216597 (SIGBUS error in getNativeKeyInfo)
>>  - S8217094: HttpClient SSL race if a socket IOException is raised
>> before ALPN is available
>>  - S8217263: Automate DashOffset test
>>  - S8217311: Improve Exception thrown when MulticastSocket.setInterface
>> fails on AIX(Unix)
>>  - S8217564: idempotent protection missing in crc32c.h
>>  - S8217647: JFR: recordings on 32-bit systems unreadable
>>  - S8217690: Update public suffix version
>>  - S8217707: JNICALL declaration breaks Splash screen functions
>>  - S8217765: Internal Error (javaCalls.cpp:61)
>> guarantee(thread->can_call_java()) failed
>>  - S8217786: Provide virtualization related info in the hs_error file
>> on linux s390x
>>  - S8217878: ENVELOPING XML signature no longer works in JDK 11
>>  - S8217879: hs_err should print more instructions in hex dump
>>  - S8217880: AIX build issue after JDK-8214533
>>  - S8218020: Fix version number in mesa.md 3rd party legal file
>>  - S8218060: JDK-8217786 breaks build due to remaining unused function
>>  - S8218063: JDK-8218060 breaks build for S390
>>  - S8218152: [javac] fails and exits with no error if a bad annotation
>> processor provided
>>  - S8218469: JSlider display issue with slider for GTKLookAndFeel
>>  - S8218470: JScrollBar display issue with GTKLookAndFeel
>>  - S8218472: JProgressBar display issue with GTKLookAndFeel
>>  - S8218473: JOptionPane display issue with GTKLookAndFeel
>>  - S8218479: JTextPane display issue with GTKLookAndFeel
>>  - S8218618: Program fails when using JDK addressed by UNC path and
>> using Security Manager
>>  - S8218629: XML Digital Signature throws NAMESPACE_ERR exception on
>> OpenJDK 11, works 8/9/10
>>  - S8218674: HTML Tooltip with "img=src" on component doesn't show
>>  - S8218733: SA: CollectedHeap provides broken implementation for
>> used() and capacity()
>>  - S8218781: Localized names for Japanese era Reiwa in COMPAT provider
>>  - S8218811: replace open by os::open in hotspot coding
>>  - S8218854: FontMetrics.getMaxAdvance may be less than the maximum
>> FontMetrics.charWidth
>>  - S8218960: CONFIG level logging statements printed in
>> CLDRCalendarDataProviderImpl.java even when default log Level is INFO
>>  - S8218991: s390: Add intrinsic for GHASH algorithm
>>  - S8219006: AArch64: Register corruption in slow subtype check
>>  - S8219011: Implement MacroAssembler::warn method on AArch64
>>  - S8219112: name_and_sig_as_C_string usages in frame_s390 miss
>> ResourceMark
>>  - S8219335: "failed: unexpected type" assert failure in
>> ConnectionGraph::split_unique_types() with unsafe accesses
>>  - S8219389: Delegated task created by SSLEngine throws
>> BufferUnderflowException
>>  - S8219414: SA: jhsdb jsnap throws UnmappedAddressException with core
>> generated by gcore
>>  - S8219448: split-if update_uses accesses stale idom data
>>  - S8219460: ppc: adjust NativeGeneralJump::insert_unconditional to
>> stack allocated MacroAssembler
>>  - S8219566: JFR did not collect call stacks when
>> MaxJavaStackTraceDepth is set to zero
>>  - S8219574: Minimal VM build failure after JDK-8219414
>>  - S8219582: PPC: Crash after C1 checkcast patched and GC
>>  - S8219584: Try to dump error file by thread which causes safepoint
>> timeout
>>  - S8219698: aarch64: SIGILL triggered when specifying unsupported
>> hardware features
>>  - S8219710: Bump update version for OpenJDK: jdk11.0.4
>>  - S8219746: Provide virtualization related info in the hs_error file
>> on linux ppc64 / ppc64le
>>
>>  - S8219915: [TESTBUG] Fix test
>> langtools/tools/javac/processing/model/completionfailure/SymbolsDontCumulate.java
>> in Standalone mode
>>  - S8219918: ProblemList hotspot tests failing in SAP testing.
>>  - S8220165: Encryption using GCM results in RuntimeException- input
>> length out of bound
>>  - S8220166: Performance regression in deserialization (4-6% in SPECjbb)
>>  - S8220198: Lots of com/sun/crypto/provider/Cipher tests fail on
>> x86_32 due to missing SHA512 stubs
>>  - S8220281: IBM-858 alias name is missing on IBM00858 charset
>>  - S8220293: Deadlock in JFR string pool
>>  - S8220349: The fix done for JDK-8214253 have caused issues in JTree
>> behaviour
>>  - S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot without
>> UnlockDiagnosticVMOptions
>>  - S8220374: C2: LoopStripMining doesn't strip as expected
>>  - S8220441: [PPC64] Clobber memory effect missing for memory barriers
>> in atomics
>>  - S8220495: Update GIFlib library to the 5.1.8
>>  - S8220513: Wrapper Key may get deleted when closing sessions in
>> SunPKCS11 crypto provider
>>  - S8220625: tools/javac/classreader/8171132/BadConstantValue.java
>> failed with "did not see expected error"
>>  - S8220707: [TESTBUG] serviceability/sa/TestHeapDumpForLargeArray.java
>> fails with jtreg -vmoption:-Xmx < 8g
>>  - S8220714: C2 Compilation failure when accessing off-heap memory
>> using Unsafe
>>  - S8220718: Missing ResourceMark in nmethod::metadata_do
>>  - S8220781: linux-s390 : os::get_summary_cpu_info gives bad output
>>  - S8220794: PPC64: Fix signal handler for SIGSEGV on branch to illegal
>> address
>>  - S8221083: [ppc64] Wrong oop compare in C1-generated code
>>  - S8221175: Fix bad function case for controlled JVM crash on PPC64
>> big-endian
>>  - S8221244: Unexpected behavior of PropertyDescription.getReadMethod
>> for boolean properties
>>  - S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard to use
>>  - S8221304: Problem list java/awt/FontMetrics/MaxAdvanceIsMax.java
>>  - S8221400: java/lang/String/StringRepeat.java test requests too much heap
>>  - S8221401: java/math/BigInteger/LargeValueExceptions.java test should
>> be disabled on 32-bit platforms
>>  - S8221412: lookupPrintServices() does not always update the list of
>> Windows remote printers
>>  - S8221437:
>> assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
>> == m()) failed: Should not change after link resolution
>>  - S8221470: Print methods in exception messages in java-like Syntax.
>>  - S8221479: Fix JFR profiling on s390
>>  - S8221483: TestOopCmp.java fails due to "Multiple garbage collectors
>> selected"
>>  - S8221535: add steal tick related information to hs_error file [linux]
>>  - S8221610: Resurrect (legacy) JRE bundle target
>>  - S8221639: [i386] expand_exec_shield_cs_limit workaround is undefined
>> code after JDK-8199717
>>  - S8221833: Readability check in Symbol::is_valid not performed for
>> some addresses
>>  - S8221870: use driver to run CtwRunner in applications/ctw tests
>>  - S8221880: Better customization for Windows RC properties
>> FileDescription and ProductName
>>  - S8221915: cleanup ticks related coding in os_perf_aix.cpp [aix]
>>  - S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit platforms
>>  - S8221924: get(null) on single-entry unmodifiable Map returns null
>> instead of throwing NPE
>>  - S8222027: java/util/logging/LogManager/TestLoggerNames.java
>> generates intermittent ClassCastException
>>  - S8222032: x86_32 fails with "wrong size of mach node" on AVX-512 machine
>>  - S8222089: [TESTBUG] sun/security/lib/cacerts/VerifyCACerts.java
>> fails due to cert within 90-day expiry window
>>  - S8222133: Add temporary exceptions for root certs that are due to
>> expire soon
>>  - S8222136: Remove two Comodo root CA certificates that are expiring
>>  - S8222137: Remove T-Systems root CA certificate
>>  - S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to garbled
>> registers
>>  - S8222410:
>> java/nio/file/attribute/BasicFileAttributeView/UnixSocketFile hangs when
>> "nc" does not accept "-U"
>>  - S8222522: Add configure options for Mac Bundle creation
>>  - S8222532: (zipfs) Performance regression when writing ZipFileSystem
>> entries in parallel
>>  - S8222913: Add Jib support for VERSION_EXTRA*
>>  - S8222930: ConcurrentSkipListMap.clone() shares size variable between
>> original and clone
>>  - S8223266: PPC64: Check for branch to illegal address before checking
>> for mem serialization
>>  - S8223395: PPC64: Improve comments in the JVM signal handler to match
>> ISA text
>>  - S8223499: Remove two DocuSign root certificates that are expiring
>>  - S8223555: Cleanups in cacerts tests
>>  - S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
>> CHECK_FAILED! (getAttribute.crc <entries20> failed 6af4413c vs 0 ...)
>>  - S8223665: SA: debugd options should follow jhsdb style
>>  - S8224474: harfbuzz 2.3.1 code fails to compile with gcc 4.4.7
>>  - S8224671: AArch64: mauve System.arraycopy test failure
>>  - S8224727: Problem list test
>> security/infra/java/security/cert/CertPathValidator/certification/ActalisCA.java
>>  - S8224828: aarch64: rflags is not correct after safepoint poll
>>  - S8224880: AArch64: java/javac error with AllocatePrefetchDistance
>>  - S8225402: events logging in deoptimization.cpp should go to deopt-log
>>  - S8225716: G1 GC: Undefined behaviour in
>> G1BlockOffsetTablePart::block_at_or_preceding
>>  - S8226876: Assertion in sun/util/locale/provider/CalendarDataUtility
>> on Windows after JDK-8218960
>>  - S8226880: Backport of JDK-8208698 (Improved ECC Implementation)
>> should not bring parts of JDK-8205476 (KeyAgreement#generateSecret is
>> not reset for ECDH based algorithm)
>>
>> -- 
>> Andrew :)
>>
>> Senior Free Java Software Engineer
>> Red Hat, Inc. (http://www.redhat.com)
>>
>> PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
>> Fingerprint = 5132 579D D154 0ED2 3E04  C5A0 CFDA 0F9B 3596 4222
>> https://keybase.io/gnu_andrew
>>


-- 
Mario Torre
Associate Manager, Software Engineering
Red Hat GmbH <https://www.redhat.com>
9704 A60C B4BE A8B8 0F30  9205 5D7E 4952 3F65 7898


More information about the jdk-updates-dev mailing list