[PATCH] jdk7u121-b00 retro-active security patch review
Andrew Brygin
abrygin at azul.com
Wed Jan 11 09:33:56 UTC 2017
Hello Andrew,
patches look fine to me.
Thanks,
Andrew
> On Jan 11, 2017, at 12:27 AM, Andrew Hughes <gnu.andrew at redhat.com> wrote:
>
>
>
> ----- Original Message -----
>>
>>
>> ----- Original Message -----
>>> We have a new release of IcedTea (http://bitly.com/it20608) and a new
>>> OpenJDK
>>> 7 release, u121-b00, to go with it. This is made from the current state of
>>> the
>>> OpenJDK 7u repositories plus backports of the new security fixes included
>>> in
>>> 8u111.
>>>
>>> The tarball is available here:
>>>
>>> https://java.net/projects/openjdk7/downloads/download/openjdk7u121-b00.tar.xz
>>>
>>> SHA256 checksum:
>>>
>>> 291f0aa2f3aa04d215e88bec01a1dbe90d972e950370ad29efe6bfd30a9c33c9
>>> openjdk7u121-b00.tar.xz
>>>
>>> Changes since u111-b01:
>>> - S6624200: Regression test fails:
>>> test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
>>> - S6882559: new JEditorPane("text/plain","") fails for null context class
>>> loader
>>> - S7090158: Networking Libraries don't build with javac -Werror
>>> - S7125055: ContentHandler.getContent API changed in error
>>> - S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on windows
>>> - S7172012: Make test-in-build an option (Queens)
>>> - S7187051: ShortRSAKeynnn.sh tests should do cleanup before start test
>>> - S8000626: Implement dead key detection for KeyEvent on Linux
>>> - S8000897: VM crash in CompileBroker
>>> - S8003890: corelibs test scripts should pass TESTVMOPTS
>>> - S8005629: javac warnings compiling java.awt.EventDispatchThread and
>>> sun.awt.X11.XIconWindow
>>> - S8010297: Missing isLoggable() checks in logging code
>>> - S8010782: clean up source files containing carriage return characters
>>> - S8014431: cleanup warnings indicated by the -Wunused-value compiler
>>> option on linux
>>> - S8015265: revise the fix for 8007037
>>> - S8016491: PPC64 (part 2): Clean up PPC defines.
>>> - S8016586: PPC64 (part 3): basic changes for PPC64
>>> - S8016696: PPC64 (part 4): add relocation for trampoline stubs
>>> - S8016747: Replace deprecated PlatformLogger isLoggable(int) with
>>> isLoggable(Level)
>>> - S8017313: PPC64 (part 6): stack handling improvements
>>> - S8017317: PPC64 (part 7): cppInterpreter: implement support for biased
>>> locking
>>> - S8019517: PPC64 (part 102): cppInterpreter: implement G1 support
>>> - S8019518: PPC64 (part 103): cppInterpreter: implement support for
>>> compressed Oops
>>> - S8019519: PPC64 (part 105): C interpreter: implement support for jvmti
>>> early return.
>>> - S8019929: PPC64 (part 107): Extend ELF-decoder to support PPC64
>>> function
>>> descriptor tables
>>> - S8019973: PPC64 (part 11): Fix IA64 preprocessor conditionals on AIX.
>>> - S8020121: PPC64: fix build in cppInterpreter after 8019519
>>> - S8020190: Fatal: Bug in native code: jfieldID must match object
>>> - S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame demo
>>> - S8024344: PPC64 (part 112): C argument in register AND stack slot.
>>> - S8024468: PPC64 (part 201): cppInterpreter: implement bytecode
>>> profiling
>>> - S8024469: PPC64 (part 202): cppInterpreter: support for OSR.
>>> - S8024756: method grouping tabs are not selectable
>>> - S8024854: PPC64: Basic changes and files to build the class library on
>>> AIX
>>> - S8024900: PPC64: Enable new build on AIX (jdk part)
>>> - S8026741: jdk8 l10n resource file translation update 5
>>> - S8029957: PPC64 (part 213): cppInterpreter: memory ordering for object
>>> initialization
>>> - S8033168: PPC64: gcc 4.8 warning in output_c.cpp
>>> - S8034797: AIX: Fix os::naked_short_sleep() in os_aix.cpp after 8028280
>>> - S8035396: Introduce accessor for tmp_oop in frame.
>>> - S8035647: PPC64: Support for elf v2 abi.
>>> - S8036767: PPC64: Support for little endian execution model
>>> - S8036976: PPC64: implement the template interpreter
>>> - S8037915: PPC64/AIX: Several smaller fixes
>>> - S8042309: Some bugfixes for the ppc64 port
>>> - S8048147: Privilege tests with JAAS Subject.doAs
>>> - S8048357: PKCS basic tests
>>> - S8049171: Additional tests for jarsigner's warnings
>>> - S8050942: PPC64: implement template interpreter for ppc64le
>>> - S8050972: Concurrency problem in PcDesc cache
>>> - S8056122: Upgrade JDK to use LittleCMS 2.6
>>> - S8057934: Upgrade to LittleCMS 2.6 breaks AIX build
>>> - S8059177: jdk8u40 l10n resource file translation update 1
>>> - S8067364: Printing to Postscript doesn't support dieresis
>>> - S8069590: AIX port of "8050807: Better performing performance data
>>> handling"
>>> - S8075584: test for 8067364 depends on hardwired text advance
>>> - S8076486: [TESTBUG] javax/security/auth/Subject/doAs/NestedActions.java
>>> fails if extra VM options are given
>>> - S8077953: [TEST_BUG]
>>> com/sun/management/OperatingSystemMXBean/TestTotalSwap.java Compilation
>>> failed after JDK-8077387
>>> - S8078482: ppc: pass thread to throw_AbstractMethodError
>>> - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
>>> - S8080628: No mnemonics on Open and Save buttons in JFileChooser
>>> - S8083601: jdk8u60 l10n resource file translation update 2
>>> - S8139258: PPC64LE: argument passing problem when passing 15 floats in
>>> native call
>>> - S8139421: PPC64LE: MacroAssembler::bxx64_patchable kill register R12
>>> - S8140530: Creating a VolatileImage with size 0,0 results in no longer
>>> working g2d.drawString
>>> - S8142926: OutputAnalyzer's shouldXXX() calls return this
>>> - S8143134: L10n resource file translation update
>>> - S8147077: IllegalArgumentException thrown by
>>> api/java_awt/Component/FlipBufferStrategy/indexTGF_General
>>> - S8148127: IllegalArgumentException thrown by JCK test
>>> api/java_awt/Component/FlipBufferStrategy/indexTGF_General in opengl
>>> pipeline
>>> - S8148487: PPC64: Better byte behavior
>>> - S8150611: Security problem on sun.misc.resources.Messages*
>>> - S8151921: Improved page resolution
>>> - S8155968: Update command line options
>>> - S8155973: Tighten jar checks
>>> - S8157176: Improved classfile parsing
>>> - S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
>>> - S8157739: Classloader Consistency Checking
>>> - S8157749: Improve handling of DNS error replies
>>> - S8157753: Audio replay enhancement
>>> - S8157759: LCMS Transform Sampling Enhancement
>>> - S8157764: Better handling of interpolation plugins
>>> - S8158260: PPC64: unaligned Unsafe.getInt can lead to the generation of
>>> illegal instructions
>>> - S8158302: Handle contextual glyph substitutions
>>> - S8158734: JEditorPane.createEditorKitForContentType throws NPE after
>>> 6882559
>>> - S8158993: Service Menu services
>>> - S8159495: Fix index offsets
>>> - S8159503: Amend Annotation Actions
>>> - S8159511: Stack map validation
>>> - S8159515: Improve indy validation
>>> - S8159519: Reformat JDWP messages
>>> - S8159684: (tz) Support tzdata2016f
>>> - S8160090: Better signature handling in pack200
>>> - S8160094: Improve pack200 layout
>>> - S8160098: Clean up color profiles
>>> - S8160591: Improve internal array handling
>>> - S8160838: Better HTTP service
>>> - S8160934: isnan() is not available on older MSVC compilers
>>> - S8162411: Service Menu services 2
>>> - S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh failing
>>> after
>>> JDK-8155968
>>> - S8162511: 8u111 L10n resource file updates
>>> - S8162792: Remove constraint DSA keySize < 1024 from
>>> jdk.jar.disabledAlgorithms in jdk8
>>> - S8164452: 8u111 L10n resource file update - msgdrop 20
>>> - S8165807: PPC64: Backport PPC64 port to OpenJDK 7
>>> - S8165816: jarsigner -verify shows jar unsigned if it was signed with a
>>> weak algorithm
>>> - S8166381: Back out changes to the java.security file to not disable MD5
>>> - S8167144: Fix aix after 8022507: SIGSEGV at
>>> ParMarkBitMap::verify_clear()
>>> - S8167198: Changes to make AIX compile after the merge
>>> - S8167335: Fix build on Linux with 64kb default page size
>>>
>>> Webrevs for the new changes:
>>>
>>> http://cr.openjdk.java.net/~andrew/openjdk7/20161018/root/
>>> http://cr.openjdk.java.net/~andrew/openjdk7/20161018/corba/
>>> http://cr.openjdk.java.net/~andrew/openjdk7/20161018/jaxp/
>>> http://cr.openjdk.java.net/~andrew/openjdk7/20161018/jaxws/
>>> http://cr.openjdk.java.net/~andrew/openjdk7/20161018/hotspot/
>>> http://cr.openjdk.java.net/~andrew/openjdk7/20161018/jdk/
>>> http://cr.openjdk.java.net/~andrew/openjdk7/20161018/langtools/
>>>
>>> Once approved, I'll push these to the OpenJDK 7 repository.
>>> --
>>> Andrew :)
>>>
>>> Senior Free Java Software Engineer
>>> Red Hat, Inc. (http://www.redhat.com)
>>>
>>> PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
>>> Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222
>>>
>>>
>>>
>>
>> Ping?
>> --
>> Andrew :)
>>
>> Senior Free Java Software Engineer
>> Red Hat, Inc. (http://www.redhat.com)
>>
>> PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
>> Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222
>>
>>
>>
>
> Ping 2?
> --
> Andrew :)
>
> Senior Free Java Software Engineer
> Red Hat, Inc. (http://www.redhat.com)
>
> PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
> Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222
>
More information about the jdk7u-dev
mailing list