OpenJDK 15.0.10 released

Wed Jan 18 14:21:39 UTC 2023

Hi all,

the release of OpenJDK 15.0.10 has been published on Jan 18, 2023

The release sources are in https://github.com/openjdk/jdk15u Git repository
tagged jdk-15.0.10-ga.

* Security fixes in this release:
=================================
   - JDK-8293598: Enhance InetAddress address handling
   - JDK-8286070: Improve UTF8 representation
   - JDK-8286496: Improve Thread labels
   - JDK-8288516: Enhance font creation
   - JDK-8287411: Enhance DTLS performance
   - JDK-8289350: Better media supports
   - JDK-8293717: Objective view of ObjectView
   - JDK-8293554: Enhanced DH Key Exchanges
   - JDK-8295723: security/infra/wycheproof/RunWycheproof.java fails
   - JDK-8293734: Improve BMP image handling
   - JDK-8293742: Better Banking of Sounds
   - JDK-8295687: Better BMP bounds

* Other changes:
================
   - JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java fails for hr_HR
   - JDK-8297804: (tz) Update Timezone Data to 2022g
   - JDK-8283323: libharfbuzz optimization level results in extreme build times
   - JDK-8273894: ConcurrentModificationException raised every time ReferralsCache drops referral
   - JDK-8297530: java.lang.IllegalArgumentException: Negative length on strings concatenation
   - JDK-8287076: Document.normalizeDocument() produces different results
   - JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java timed out
   - JDK-8287180: Update IANA Language Subtag Registry to Version 2022-08-08
   - JDK-8267038: Update IANA Language Subtag Registry to Version 2022-03-02
   - JDK-8290451: Incorrect result when switching to C2 OSR compilation from C1
   - JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
   - JDK-8296496: Overzealous check in sizecalc.h prevents large memory allocation
   - JDK-8296480: java/security/cert/pkix/policyChanges/TestPolicy.java is failing
   - JDK-8296715: CLDR v42 update for tzdata 2022f
   - JDK-8297027: Fix broken aarch64 build of 13u/15u after bad backport of 8293044
   - JDK-8296239: ISO 4217 Amendment 174 Update
   - JDK-8294307: ISO 4217 Amendment 173 Update
   - JDK-8296108: (tz) Update Timezone Data to 2022f
   - JDK-8295554: Move the "sizecalc.h" to the correct location
   - JDK-8293816: CI: ciBytecodeStream::get_klass() is not consistent
   - JDK-8293044: C1: Missing access check on non-accessible class
   - JDK-8293701: jdeps InverseDepsAnalyzer runs into NoSuchElementException: No value present
   - JDK-8277881: Missing SessionID in TLS1.3 resumption in compatibility mode
   - JDK-8270344: Session resumption errors
   - JDK-8293672: Update freetype md file
   - JDK-8284690: [macos] VoiceOver : Getting java.lang.IllegalArgumentException: Invalid location on 
Editable JComboBox
   - JDK-8295530: Update Zlib Data Compression Library to Version 1.2.13
   - JDK-8295429: Update harfbuzz md file
   - JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you should use literals"
   - JDK-8292158: AES-CTR cipher state corruption with AVX-512
   - JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also has similar error of JDK-8253368
   - JDK-8253368: TLS connection always receives close_notify exception
   - JDK-8295173: (tz) Update Timezone Data to 2022e
   - JDK-8294357: (tz) Update Timezone Data to 2022d
   - JDK-8283059: Uninitialized warning in check_code.c with GCC 11.2
   - JDK-8266171: -Warray-bounds happens in imageioJPEG.c
   - JDK-8266174: -Wmisleading-indentation happens in libmlib_image sources

* Notes on some issues:
=========================

security-libs/javax.net.ssl
   JDK-8287411: Enhance DTLS performance
   ====================================
     With this fix JDK will by default exchange DTLS cookies for all handshakes
     (new and resumed) unless new system property jdk.tls.enableDtlsResumeCookie=false.
     The property only affects the cookie exchange for resumption.

client-libs/javax.sound
   JDK-8293742: Better Banking of Sounds
   =====================================
     Here is introduced new boolean system property jdk.sound.jarsoundbank that
     enables the Jar soundbank loading.
     It should be set to true if jar sound bank is allowed to be loaded.
     Default is false.

client-libs/javax.imageio
   JDK-8295687: Better BMP bounds
   ==============================
     Property change in this fix:
     old undocumented system property
     boolean sun.imageio.plugins.bmp.disableLinkedProfiles changed to a new
     boolean sun.imageio.bmp.enableLinkedProfiles
     Thus default behavior reverted: to allow linked color profiles in BMP image one
     should explicitly set this new property to true.

core-libs/java.time
   JDK-8294357 (tz) Update Timezone Data to 2022d
   ==============================================
   * Palestine transitions are now Saturdays at 02:00.
   * Simplify three Ukraine zones into one.

   JDK-8295173 (tz) Update Timezone Data to 2022e
   ==============================================
   * Jordan and Syria switch from +02/+03 with DST to year-round +03

   JDK-8296108 (tz) Update Timezone Data to 2022f
   ==============================================
   * Mexico will no longer observe DST except near the US border.
   * Chihuahua moves to year-round -06 on 2022-10-30.
   * Fiji no longer observes DST.
   * Move links to 'backward'.
   * In vanguard form, GMT is now a Zone and Etc/GMT a link.
   * zic now supports links to links, and vanguard form uses this.
   * Simplify four Ontario zones.
   * Fix a Y2438 bug when reading TZif data.
   * Enable 64-bit time_t on 32-bit glibc platforms.
   * Omit large-file support when no longer needed.
   * In C code, use some C23 features if available.
   * Remove no-longer-needed workaround for Qt bug 53071.

   JDK-8297804 (tz) Update Timezone Data to 2022g
   ==============================================
   * The northern edge of Chihuahua changes to US timekeeping.
   * Much of Greenland stops changing clocks after March 2023.
   * Fix some pre-1996 timestamps in northern Canada.
   * C89 is now deprecated; please use C99 or later.
   * Portability fixes for AIX, libintl, MS-Windows, musl, z/OS
   * In C code, use more C23 features if available.
   * C23 timegm now supported by default
   * Fixes for unlikely integer overflows