[PATCH] jdk7u121-b00 retro-active security patch review
Andrew Hughes
gnu.andrew at redhat.com
Mon Dec 5 15:55:40 UTC 2016
----- Original Message -----
> We have a new release of IcedTea (http://bitly.com/it20608) and a new OpenJDK
> 7 release, u121-b00, to go with it. This is made from the current state of
> the
> OpenJDK 7u repositories plus backports of the new security fixes included in
> 8u111.
>
> The tarball is available here:
>
> https://java.net/projects/openjdk7/downloads/download/openjdk7u121-b00.tar.xz
>
> SHA256 checksum:
>
> 291f0aa2f3aa04d215e88bec01a1dbe90d972e950370ad29efe6bfd30a9c33c9
> openjdk7u121-b00.tar.xz
>
> Changes since u111-b01:
> - S6624200: Regression test fails:
> test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
> - S6882559: new JEditorPane("text/plain","") fails for null context class
> loader
> - S7090158: Networking Libraries don't build with javac -Werror
> - S7125055: ContentHandler.getContent API changed in error
> - S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on windows
> - S7172012: Make test-in-build an option (Queens)
> - S7187051: ShortRSAKeynnn.sh tests should do cleanup before start test
> - S8000626: Implement dead key detection for KeyEvent on Linux
> - S8000897: VM crash in CompileBroker
> - S8003890: corelibs test scripts should pass TESTVMOPTS
> - S8005629: javac warnings compiling java.awt.EventDispatchThread and
> sun.awt.X11.XIconWindow
> - S8010297: Missing isLoggable() checks in logging code
> - S8010782: clean up source files containing carriage return characters
> - S8014431: cleanup warnings indicated by the -Wunused-value compiler
> option on linux
> - S8015265: revise the fix for 8007037
> - S8016491: PPC64 (part 2): Clean up PPC defines.
> - S8016586: PPC64 (part 3): basic changes for PPC64
> - S8016696: PPC64 (part 4): add relocation for trampoline stubs
> - S8016747: Replace deprecated PlatformLogger isLoggable(int) with
> isLoggable(Level)
> - S8017313: PPC64 (part 6): stack handling improvements
> - S8017317: PPC64 (part 7): cppInterpreter: implement support for biased
> locking
> - S8019517: PPC64 (part 102): cppInterpreter: implement G1 support
> - S8019518: PPC64 (part 103): cppInterpreter: implement support for
> compressed Oops
> - S8019519: PPC64 (part 105): C interpreter: implement support for jvmti
> early return.
> - S8019929: PPC64 (part 107): Extend ELF-decoder to support PPC64 function
> descriptor tables
> - S8019973: PPC64 (part 11): Fix IA64 preprocessor conditionals on AIX.
> - S8020121: PPC64: fix build in cppInterpreter after 8019519
> - S8020190: Fatal: Bug in native code: jfieldID must match object
> - S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame demo
> - S8024344: PPC64 (part 112): C argument in register AND stack slot.
> - S8024468: PPC64 (part 201): cppInterpreter: implement bytecode profiling
> - S8024469: PPC64 (part 202): cppInterpreter: support for OSR.
> - S8024756: method grouping tabs are not selectable
> - S8024854: PPC64: Basic changes and files to build the class library on
> AIX
> - S8024900: PPC64: Enable new build on AIX (jdk part)
> - S8026741: jdk8 l10n resource file translation update 5
> - S8029957: PPC64 (part 213): cppInterpreter: memory ordering for object
> initialization
> - S8033168: PPC64: gcc 4.8 warning in output_c.cpp
> - S8034797: AIX: Fix os::naked_short_sleep() in os_aix.cpp after 8028280
> - S8035396: Introduce accessor for tmp_oop in frame.
> - S8035647: PPC64: Support for elf v2 abi.
> - S8036767: PPC64: Support for little endian execution model
> - S8036976: PPC64: implement the template interpreter
> - S8037915: PPC64/AIX: Several smaller fixes
> - S8042309: Some bugfixes for the ppc64 port
> - S8048147: Privilege tests with JAAS Subject.doAs
> - S8048357: PKCS basic tests
> - S8049171: Additional tests for jarsigner's warnings
> - S8050942: PPC64: implement template interpreter for ppc64le
> - S8050972: Concurrency problem in PcDesc cache
> - S8056122: Upgrade JDK to use LittleCMS 2.6
> - S8057934: Upgrade to LittleCMS 2.6 breaks AIX build
> - S8059177: jdk8u40 l10n resource file translation update 1
> - S8067364: Printing to Postscript doesn't support dieresis
> - S8069590: AIX port of "8050807: Better performing performance data
> handling"
> - S8075584: test for 8067364 depends on hardwired text advance
> - S8076486: [TESTBUG] javax/security/auth/Subject/doAs/NestedActions.java
> fails if extra VM options are given
> - S8077953: [TEST_BUG]
> com/sun/management/OperatingSystemMXBean/TestTotalSwap.java Compilation
> failed after JDK-8077387
> - S8078482: ppc: pass thread to throw_AbstractMethodError
> - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
> - S8080628: No mnemonics on Open and Save buttons in JFileChooser
> - S8083601: jdk8u60 l10n resource file translation update 2
> - S8139258: PPC64LE: argument passing problem when passing 15 floats in
> native call
> - S8139421: PPC64LE: MacroAssembler::bxx64_patchable kill register R12
> - S8140530: Creating a VolatileImage with size 0,0 results in no longer
> working g2d.drawString
> - S8142926: OutputAnalyzer's shouldXXX() calls return this
> - S8143134: L10n resource file translation update
> - S8147077: IllegalArgumentException thrown by
> api/java_awt/Component/FlipBufferStrategy/indexTGF_General
> - S8148127: IllegalArgumentException thrown by JCK test
> api/java_awt/Component/FlipBufferStrategy/indexTGF_General in opengl
> pipeline
> - S8148487: PPC64: Better byte behavior
> - S8150611: Security problem on sun.misc.resources.Messages*
> - S8151921: Improved page resolution
> - S8155968: Update command line options
> - S8155973: Tighten jar checks
> - S8157176: Improved classfile parsing
> - S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
> - S8157739: Classloader Consistency Checking
> - S8157749: Improve handling of DNS error replies
> - S8157753: Audio replay enhancement
> - S8157759: LCMS Transform Sampling Enhancement
> - S8157764: Better handling of interpolation plugins
> - S8158260: PPC64: unaligned Unsafe.getInt can lead to the generation of
> illegal instructions
> - S8158302: Handle contextual glyph substitutions
> - S8158734: JEditorPane.createEditorKitForContentType throws NPE after
> 6882559
> - S8158993: Service Menu services
> - S8159495: Fix index offsets
> - S8159503: Amend Annotation Actions
> - S8159511: Stack map validation
> - S8159515: Improve indy validation
> - S8159519: Reformat JDWP messages
> - S8159684: (tz) Support tzdata2016f
> - S8160090: Better signature handling in pack200
> - S8160094: Improve pack200 layout
> - S8160098: Clean up color profiles
> - S8160591: Improve internal array handling
> - S8160838: Better HTTP service
> - S8160934: isnan() is not available on older MSVC compilers
> - S8162411: Service Menu services 2
> - S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh failing after
> JDK-8155968
> - S8162511: 8u111 L10n resource file updates
> - S8162792: Remove constraint DSA keySize < 1024 from
> jdk.jar.disabledAlgorithms in jdk8
> - S8164452: 8u111 L10n resource file update - msgdrop 20
> - S8165807: PPC64: Backport PPC64 port to OpenJDK 7
> - S8165816: jarsigner -verify shows jar unsigned if it was signed with a
> weak algorithm
> - S8166381: Back out changes to the java.security file to not disable MD5
> - S8167144: Fix aix after 8022507: SIGSEGV at ParMarkBitMap::verify_clear()
> - S8167198: Changes to make AIX compile after the merge
> - S8167335: Fix build on Linux with 64kb default page size
>
> Webrevs for the new changes:
>
> http://cr.openjdk.java.net/~andrew/openjdk7/20161018/root/
> http://cr.openjdk.java.net/~andrew/openjdk7/20161018/corba/
> http://cr.openjdk.java.net/~andrew/openjdk7/20161018/jaxp/
> http://cr.openjdk.java.net/~andrew/openjdk7/20161018/jaxws/
> http://cr.openjdk.java.net/~andrew/openjdk7/20161018/hotspot/
> http://cr.openjdk.java.net/~andrew/openjdk7/20161018/jdk/
> http://cr.openjdk.java.net/~andrew/openjdk7/20161018/langtools/
>
> Once approved, I'll push these to the OpenJDK 7 repository.
> --
> Andrew :)
>
> Senior Free Java Software Engineer
> Red Hat, Inc. (http://www.redhat.com)
>
> PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
> Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222
>
>
>
Ping?
--
Andrew :)
Senior Free Java Software Engineer
Red Hat, Inc. (http://www.redhat.com)
PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222
More information about the jdk7u-dev
mailing list