[PATCH] b35 Release and retro-active security patch review

Andrew Hughes gnu.andrew at redhat.com
Tue Apr 14 21:15:49 UTC 2015


We have a new release, b35, which is made from the current state
of the OpenJDK 6 repositories plus backports of the new
security fixes included in 7u79.

The tarballs are available here:

https://java.net/projects/openjdk6/downloads/download/openjdk-6-src-b35-14_apr_2015.tar.gz
https://java.net/projects/openjdk6/downloads/download/openjdk-6-src-b35-14_apr_2015.tar.xz
 
SHA256 checksums:
 
b7749105e8e824d59cbd3885c8e54b28fee5cde3c8272f674edc13bf93e0f415  openjdk-6-src-b35-14_apr_2015.tar.gz
131cde181fbca08ac4d47bd13f6c3a64806fe2ae2106c03afe7ba651c24a4f9b  openjdk-6-src-b35-14_apr_2015.tar.xz

Changes since b34 (including both CPU fixes and upstreamed changes):
  - OPENJDK6-51: Sync patch for 4873188 with 7 version
  - OPENJDK6-52: Application of 6786276 introduces compatibility issue
  - OPENJDK6-53: strict-aliasing warnings issued on PPC32
  - OPENJDK6-54: 6911104 reintroduces test fragment removed in existing 6964018 backport
  - OPENJDK6-55: Synchronise whitespace in TimeZoneNames files with OpenJDK 7 versions.
  - OPENJDK6-56: Update 3rd party readme and license for LibPNG v 1.6.16
  - OPENJDK6-57: Remove mistakenly added patching fragment
  - S6672144: HttpURLConnection.getInputStream sends POST request after failed chunked
  - S6730740: Fix for 6729881 has apparently broken several 64 bit tests:  "Bad address"
  - S6989721: awt native code compiler warnings
  - S7031830: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
  - S7088287: libpng need to be updated.
  - S7090424: TestGlyphVectorLayout failed automately with java.lang.StackOverflowError
  - S7170655: Frame size does not follow font size change with XToolkit
  - S7176479: G1: JVM crashes on T5-8 system with 1.5 TB heap
  - S8019623: Lack of synchronization in AppContext.getAppContext()
  - S8020190: Fatal: Bug in native code: jfieldID must match object
  - S8028623: SA: hash codes in SymbolTable mismatching java_lang_String::hash_code for extended characters.
  - S8040790: [TEST_BUG] tools/javac/innerClassFile/Driver.sh fails to cleanup files after it
  - S8043123: Hard crash with access violation exception when blitting to very large image
  - S8051359: JPopupMenu creation in headless mode with JDK9b23 causes NPE
  - S8059064: Better G1 log caching
  - S8060461: Fix for JDK-8042609 uncovers additional issue
  - S8061785: [TEST_BUG] serviceability/sa/jmap-hashcode/Test8028623.java has utf8 character corrupted by earlier merge
  - S8064454: [TEST_BUG] Test tools/javac/innerClassFile/Driver.sh fails for Mac and Linux
  - S8064601: Improve jar file handling
  - S8065072: sun/net/www/http/HttpClient/StreamingRetry.java failed intermittently
  - S8065286: Fewer subtable substitutions
  - S8065291: Improved font lookups
  - S8065709: Deadlock in awt/logging apparently introduced by 8019623
  - S8066479: Better certificate chain validation
  - S8067050: Better font consistency checking
  - S8067684: Better font substitutions
  - S8067699: Better glyph storage
  - S8068320: Limit applet requests
  - S8068720: Better certificate options checking
  - S8069198: Upgrade image library
  - S8071726: Better RSA optimizations
  - S8071818: Better vectorization on SPARC
  - S8071931: Return of the phantom menace
  - S8072042: (tz) Support tzdata2015a
  - S8074662: Update 3rd party readme and license for LibPNG v 1.6.16
  - S8075211: [TEST_BUG] Test sun/net/www/http/HttpClient/StreamingRetry.java fails with compilation error

Webrevs for the new changes:
 
http://cr.openjdk.java.net/~andrew/openjdk6/20150414/root/
http://cr.openjdk.java.net/~andrew/openjdk6/20150414/corba/
http://cr.openjdk.java.net/~andrew/openjdk6/20150414/jaxp/
http://cr.openjdk.java.net/~andrew/openjdk6/20150414/jaxws/
http://cr.openjdk.java.net/~andrew/openjdk6/20150414/hotspot/
http://cr.openjdk.java.net/~andrew/openjdk6/20150414/jdk/
http://cr.openjdk.java.net/~andrew/openjdk6/20150414/langtools/

Once approved, I'll push these to the OpenJDK 6 repository along with a b35 tag.

Thanks,
-- 
Andrew :)

Free Java Software Engineer
Red Hat, Inc. (http://www.redhat.com)

PGP Key: ed25519/35964222 (hkp://keys.gnupg.net)
Fingerprint = 5132 579D D154 0ED2 3E04  C5A0 CFDA 0F9B 3596 4222

PGP Key: rsa4096/248BDC07 (hkp://keys.gnupg.net)
Fingerprint = EC5A 1F5E C0AD 1D15 8F1F  8F91 3B96 A578 248B DC07



More information about the jdk6-dev mailing list