OpenJDK 13.0.6 released

Wed Jan 20 07:08:22 UTC 2021

Hi all,

let me announce the release of OpenJDK 13.0.6.

The release sources are in https://github.com/openjdk/jdk13u Git repository.

A list of fixes please see below.
Also, a nicely generated list could be found, again, at A. Shipilev's site:
https://builds.shipilev.net/backports-monitor/release-notes-13.0.6.txt

* Security fix
    JDK-8247619: Improve Direct Buffering of Characters

* Other changes
    JDK-8234011: (zipfs) Memory leak in ZipFileSystem.releaseDeflater()
    JDK-8210527: JShell: NullPointerException in jdk.jshell.Eval.translateExceptionStack
    JDK-8232855: jshell missing word in /help help
    JDK-8236859: WebSocket over authenticating proxy fails with NPE
    JDK-8254854: [cgroups v1] Metric limits not properly detected on some join controller combinations
    JDK-8257242: [macOS] Java app crashes while switching input methods
    JDK-8255603: Memory/Performance regression after JDK-8210985
    JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks in an infinite loop OpenJDK (build
13.0.1+9)
    JDK-8245400: Upgrade to LittleCMS 2.11
    JDK-8248532: Every time I change keyboard language at my MacBook, Java crashes
    JDK-8239886: Minimal VM build fails after JDK-8237499
    JDK-8237499: JFR: Include stack trace in the ThreadStart event
    JDK-8247867: Upgrade to freetype 2.10.2
    JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    JDK-8248347: windows build broken by JDK-8243114
    JDK-8243114: Implement montgomery{Multiply,Square}intrinsics on Windows
    JDK-8251365: Build failure on AIX after 8250636
    JDK-8250636: iso8601_time returns incorrect offset part on MacOS
    JDK-8254081: java/security/cert/PolicyNode/GetPolicyQualifiers.java fails due to an expired
certificate
    JDK-8233686: XML transformer uses excessive amount of memory
    JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check the bounds
    JDK-8234347: "Turkey" meta time zone does not generate composed localized names
    JDK-8236548: Localized time zone name inconsistency between English and other locales
    JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK characters
    JDK-8250984: Memory Docker tests fail on some Linux kernels w/o cgroupv1 swap limit capabilities
    JDK-8231968: getCurrentThreadAllocatedBytes default implementation s/b getThreadAllocatedBytes
    JDK-8246648: issue with OperatingSystemImpl getFreeSwapSpaceSize in docker after 8242480
    JDK-8231209: [REDO] JDK-8207266 ThreadMXBean::getThreadAllocatedBytes() can be quicker for self thread
    JDK-8242480: Negative value may be returned by getFreeSwapSpaceSize() in the docker
    JDK-8250627: Use -XX:+/-UseContainerSupport for enabling/disabling Java container metrics
    JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    JDK-8233228: Disable weak named curves by default in TLS, CertPath, and Signed JAR
    JDK-8230402: Allocation of compile task fails with assert: "Leaking compilation tasks?"
    JDK-8233958: Memory retention due to HttpsURLConnection finalizer that serves no purpose
    JDK-8235183: Remove the "HACK CODE" in comment
    JDK-8236617: jtreg test containers/docker/TestMemoryAwareness.java fails after 8226575
    JDK-8223940: Private key not supported by chosen signature algorithm
    JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    JDK-8233954: UnsatisfiedLinkError or NoSuchAlgorithmException after removing sunec.dll
    JDK-8226575: OperatingSystemMXBean should be made container aware
    JDK-8243489: Thread CPU Load event may contain wrong data for CPU time under certain conditions
    JDK-8230767: FlightRecorderListener returns null recording
    JDK-8227006: [linux] Runtime.availableProcessors execution time increased by factor of 100
    JDK-8213535: Windows HiDPI html lightweight tooltips are truncated
    JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java fails to find ThreadLocalObject
    JDK-8241138: http.nonProxyHosts=* causes StringIndexOutOfBoundsException in DefaultProxySelector
    JDK-8238579: HttpsURLConnection drops the timeout and hangs forever in read
    JDK-8244621: [macos10.15] Garbled FX printing plus CoreText warnings on Catalina when building
with Xcode 11
    JDK-8233452: java.math.BigDecimal.sqrt() with RoundingMode.FLOOR results in incorrect result
    JDK-8240603: Windows 32bit compile error after 8238676
    JDK-8238676: jni crashes on accessing it from process exit hook
    JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails -XX:+VerifyOops with "verify_oop:
rsi: broken oop"
    JDK-8245527: LDAP Channel Binding support for Java GSS/Kerberos
    JDK-8226374: Restrict TLS signature schemes and named groups
    JDK-8062947: Fix exception message to correctly represent LDAP connection failure
    JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed due to timeout on
DeadServerNoTimeoutTest is incorrect
    JDK-8252754: Hash code calculation of JfrStackTrace is inconsistent
    JDK-8248865: Document JNDI/LDAP timeout properties
    JDK-8238270: java.net HTTP/2 client does not decrease stream count when receives 204 response
    JDK-8250928: JFR: Improve hash algorithm for stack traces
    JDK-8249255: Build fails if source code in cygwin home dir
    JDK-8229378: jdwp library loader in linker_md.c quietly truncates on buffer overflow
    JDK-8228448: Jconsole can't connect to itself
    JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    JDK-8255468: JDK-8255269 incorrectly replaced average copy time
    JDK-8255269: Unsigned overflow in g1Policy.cpp
    JDK-8232616: JVMCI_lock fails to get initialized when cds is disabled
    JDK-8206179: com/sun/management/OperatingSystemMXBean/GetCommittedVirtualMemorySize.java fails
with Committed virtual memory size illegal value
    JDK-8253631: Remove unimplemented CompileBroker methods after JEP-165

* Notes on some issues:

Bug ids below are original bug ids because presently the original bug is the root
of all backport discussions containing all the links and semaphore labels.

________________________________________
core-svc/java.lang.management
JDK-8226575: OperatingSystemMXBean Methods Inside a Container Return Container Specific Data

When executing in a container, or other virtualized operating environment, the following
OperatingSystemMXBean methods in this release return container specific information, if available.
Otherwise, they return host specific data:

    getFreePhysicalMemorySize()
    getTotalPhysicalMemorySize()
    getFreeSwapSpaceSize()
    getTotalSwapSpaceSize()
    getSystemCpuLoad()

________________________________________
security-libs/java.security
JDK-8233228: Weak Named Curves in TLS, CertPath, and Signed JAR Disabled by Default

Weak named curves are disabled by default by adding them to the following disabledAlgorithms security
properties: jdk.tls.disabledAlgorithms, jdk.certpath.disabledAlgorithms, and
jdk.jar.disabledAlgorithms. The named curves are listed below.

With 47 weak named curves to be disabled, adding individual named curves to each disabledAlgorithms
property would be overwhelming. To relieve this, a new security property, jdk.disabled.namedCurves, is
implemented that can list the named curves common to all of the disabledAlgorithms properties. To use
the new property in the disabledAlgorithms properties, precede the full property name with the keyword
include. Users can still add individual named curves to disabledAlgorithms properties separate from
this new property. No other properties can be included in the disabledAlgorithms properties.

To restore the named curves, remove the include jdk.disabled.namedCurves either from specific or from
all disabledAlgorithms security properties. To restore one or more curves, remove the specific named
curve(s) from the jdk.disabled.namedCurves property.

Curves that are disabled through jdk.disabled.namedCurves include the following: secp112r1, secp112r2,
secp128r1, secp128r2, secp160k1, secp160r1, secp160r2, secp192k1, secp192r1, secp224k1, secp224r1,
secp256k1, sect113r1, sect113r2, sect131r1, sect131r2, sect163k1, sect163r1, sect163r2, sect193r1,
sect193r2, sect233k1, sect233r1, sect239k1, sect283k1, sect283r1, sect409k1, sect409r1, sect571k1,
sect571r1, X9.62 c2tnb191v1, X9.62 c2tnb191v2, X9.62 c2tnb191v3, X9.62 c2tnb239v1, X9.62 c2tnb239v2,
X9.62 c2tnb239v3, X9.62 c2tnb359v1, X9.62 c2tnb431r1, X9.62 prime192v2, X9.62 prime192v3, X9.62
prime239v1, X9.62 prime239v2, X9.62 prime239v3, brainpoolP256r1, brainpoolP320r1, brainpoolP384r1,
brainpoolP512r1

Curves that remain enabled are: secp256r1, secp384r1, secp521r1, X25519, X448

________________________________________
core-libs/java.util:i18n
JDK-8236548: Localized Time Zone Name Inconsistency Between English and Other Locales

English time zone names provided by the CLDR locale provider are now correctly synthesized following
the CLDR spec, rather than substituted from the COMPAT provider. For example, SHORT style names are no
longer synthesized abbreviations of LONG style names, but instead produce GMT offset formats.