[PATCH] jdk7u121-b00 retro-active security patch review
Andrew Hughes
gnu.andrew at redhat.com
Tue Jan 10 21:27:32 UTC 2017
----- Original Message -----
>
>
> ----- Original Message -----
> > We have a new release of IcedTea (http://bitly.com/it20608) and a new
> > OpenJDK
> > 7 release, u121-b00, to go with it. This is made from the current state of
> > the
> > OpenJDK 7u repositories plus backports of the new security fixes included
> > in
> > 8u111.
> >
> > The tarball is available here:
> >
> > https://java.net/projects/openjdk7/downloads/download/openjdk7u121-b00.tar.xz
> >
> > SHA256 checksum:
> >
> > 291f0aa2f3aa04d215e88bec01a1dbe90d972e950370ad29efe6bfd30a9c33c9
> > openjdk7u121-b00.tar.xz
> >
> > Changes since u111-b01:
> > - S6624200: Regression test fails:
> > test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
> > - S6882559: new JEditorPane("text/plain","") fails for null context class
> > loader
> > - S7090158: Networking Libraries don't build with javac -Werror
> > - S7125055: ContentHandler.getContent API changed in error
> > - S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on windows
> > - S7172012: Make test-in-build an option (Queens)
> > - S7187051: ShortRSAKeynnn.sh tests should do cleanup before start test
> > - S8000626: Implement dead key detection for KeyEvent on Linux
> > - S8000897: VM crash in CompileBroker
> > - S8003890: corelibs test scripts should pass TESTVMOPTS
> > - S8005629: javac warnings compiling java.awt.EventDispatchThread and
> > sun.awt.X11.XIconWindow
> > - S8010297: Missing isLoggable() checks in logging code
> > - S8010782: clean up source files containing carriage return characters
> > - S8014431: cleanup warnings indicated by the -Wunused-value compiler
> > option on linux
> > - S8015265: revise the fix for 8007037
> > - S8016491: PPC64 (part 2): Clean up PPC defines.
> > - S8016586: PPC64 (part 3): basic changes for PPC64
> > - S8016696: PPC64 (part 4): add relocation for trampoline stubs
> > - S8016747: Replace deprecated PlatformLogger isLoggable(int) with
> > isLoggable(Level)
> > - S8017313: PPC64 (part 6): stack handling improvements
> > - S8017317: PPC64 (part 7): cppInterpreter: implement support for biased
> > locking
> > - S8019517: PPC64 (part 102): cppInterpreter: implement G1 support
> > - S8019518: PPC64 (part 103): cppInterpreter: implement support for
> > compressed Oops
> > - S8019519: PPC64 (part 105): C interpreter: implement support for jvmti
> > early return.
> > - S8019929: PPC64 (part 107): Extend ELF-decoder to support PPC64
> > function
> > descriptor tables
> > - S8019973: PPC64 (part 11): Fix IA64 preprocessor conditionals on AIX.
> > - S8020121: PPC64: fix build in cppInterpreter after 8019519
> > - S8020190: Fatal: Bug in native code: jfieldID must match object
> > - S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame demo
> > - S8024344: PPC64 (part 112): C argument in register AND stack slot.
> > - S8024468: PPC64 (part 201): cppInterpreter: implement bytecode
> > profiling
> > - S8024469: PPC64 (part 202): cppInterpreter: support for OSR.
> > - S8024756: method grouping tabs are not selectable
> > - S8024854: PPC64: Basic changes and files to build the class library on
> > AIX
> > - S8024900: PPC64: Enable new build on AIX (jdk part)
> > - S8026741: jdk8 l10n resource file translation update 5
> > - S8029957: PPC64 (part 213): cppInterpreter: memory ordering for object
> > initialization
> > - S8033168: PPC64: gcc 4.8 warning in output_c.cpp
> > - S8034797: AIX: Fix os::naked_short_sleep() in os_aix.cpp after 8028280
> > - S8035396: Introduce accessor for tmp_oop in frame.
> > - S8035647: PPC64: Support for elf v2 abi.
> > - S8036767: PPC64: Support for little endian execution model
> > - S8036976: PPC64: implement the template interpreter
> > - S8037915: PPC64/AIX: Several smaller fixes
> > - S8042309: Some bugfixes for the ppc64 port
> > - S8048147: Privilege tests with JAAS Subject.doAs
> > - S8048357: PKCS basic tests
> > - S8049171: Additional tests for jarsigner's warnings
> > - S8050942: PPC64: implement template interpreter for ppc64le
> > - S8050972: Concurrency problem in PcDesc cache
> > - S8056122: Upgrade JDK to use LittleCMS 2.6
> > - S8057934: Upgrade to LittleCMS 2.6 breaks AIX build
> > - S8059177: jdk8u40 l10n resource file translation update 1
> > - S8067364: Printing to Postscript doesn't support dieresis
> > - S8069590: AIX port of "8050807: Better performing performance data
> > handling"
> > - S8075584: test for 8067364 depends on hardwired text advance
> > - S8076486: [TESTBUG] javax/security/auth/Subject/doAs/NestedActions.java
> > fails if extra VM options are given
> > - S8077953: [TEST_BUG]
> > com/sun/management/OperatingSystemMXBean/TestTotalSwap.java Compilation
> > failed after JDK-8077387
> > - S8078482: ppc: pass thread to throw_AbstractMethodError
> > - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
> > - S8080628: No mnemonics on Open and Save buttons in JFileChooser
> > - S8083601: jdk8u60 l10n resource file translation update 2
> > - S8139258: PPC64LE: argument passing problem when passing 15 floats in
> > native call
> > - S8139421: PPC64LE: MacroAssembler::bxx64_patchable kill register R12
> > - S8140530: Creating a VolatileImage with size 0,0 results in no longer
> > working g2d.drawString
> > - S8142926: OutputAnalyzer's shouldXXX() calls return this
> > - S8143134: L10n resource file translation update
> > - S8147077: IllegalArgumentException thrown by
> > api/java_awt/Component/FlipBufferStrategy/indexTGF_General
> > - S8148127: IllegalArgumentException thrown by JCK test
> > api/java_awt/Component/FlipBufferStrategy/indexTGF_General in opengl
> > pipeline
> > - S8148487: PPC64: Better byte behavior
> > - S8150611: Security problem on sun.misc.resources.Messages*
> > - S8151921: Improved page resolution
> > - S8155968: Update command line options
> > - S8155973: Tighten jar checks
> > - S8157176: Improved classfile parsing
> > - S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
> > - S8157739: Classloader Consistency Checking
> > - S8157749: Improve handling of DNS error replies
> > - S8157753: Audio replay enhancement
> > - S8157759: LCMS Transform Sampling Enhancement
> > - S8157764: Better handling of interpolation plugins
> > - S8158260: PPC64: unaligned Unsafe.getInt can lead to the generation of
> > illegal instructions
> > - S8158302: Handle contextual glyph substitutions
> > - S8158734: JEditorPane.createEditorKitForContentType throws NPE after
> > 6882559
> > - S8158993: Service Menu services
> > - S8159495: Fix index offsets
> > - S8159503: Amend Annotation Actions
> > - S8159511: Stack map validation
> > - S8159515: Improve indy validation
> > - S8159519: Reformat JDWP messages
> > - S8159684: (tz) Support tzdata2016f
> > - S8160090: Better signature handling in pack200
> > - S8160094: Improve pack200 layout
> > - S8160098: Clean up color profiles
> > - S8160591: Improve internal array handling
> > - S8160838: Better HTTP service
> > - S8160934: isnan() is not available on older MSVC compilers
> > - S8162411: Service Menu services 2
> > - S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh failing
> > after
> > JDK-8155968
> > - S8162511: 8u111 L10n resource file updates
> > - S8162792: Remove constraint DSA keySize < 1024 from
> > jdk.jar.disabledAlgorithms in jdk8
> > - S8164452: 8u111 L10n resource file update - msgdrop 20
> > - S8165807: PPC64: Backport PPC64 port to OpenJDK 7
> > - S8165816: jarsigner -verify shows jar unsigned if it was signed with a
> > weak algorithm
> > - S8166381: Back out changes to the java.security file to not disable MD5
> > - S8167144: Fix aix after 8022507: SIGSEGV at
> > ParMarkBitMap::verify_clear()
> > - S8167198: Changes to make AIX compile after the merge
> > - S8167335: Fix build on Linux with 64kb default page size
> >
> > Webrevs for the new changes:
> >
> > http://cr.openjdk.java.net/~andrew/openjdk7/20161018/root/
> > http://cr.openjdk.java.net/~andrew/openjdk7/20161018/corba/
> > http://cr.openjdk.java.net/~andrew/openjdk7/20161018/jaxp/
> > http://cr.openjdk.java.net/~andrew/openjdk7/20161018/jaxws/
> > http://cr.openjdk.java.net/~andrew/openjdk7/20161018/hotspot/
> > http://cr.openjdk.java.net/~andrew/openjdk7/20161018/jdk/
> > http://cr.openjdk.java.net/~andrew/openjdk7/20161018/langtools/
> >
> > Once approved, I'll push these to the OpenJDK 7 repository.
> > --
> > Andrew :)
> >
> > Senior Free Java Software Engineer
> > Red Hat, Inc. (http://www.redhat.com)
> >
> > PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
> > Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222
> >
> >
> >
>
> Ping?
> --
> Andrew :)
>
> Senior Free Java Software Engineer
> Red Hat, Inc. (http://www.redhat.com)
>
> PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
> Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222
>
>
>
Ping 2?
--
Andrew :)
Senior Free Java Software Engineer
Red Hat, Inc. (http://www.redhat.com)
PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222
More information about the jdk7u-dev
mailing list