[PATCH] jdk7u121-b00 retro-active security patch review
Andrew Hughes
gnu.andrew at redhat.com
Wed Jan 11 16:39:59 UTC 2017
----- Original Message -----
> Hi,
>
> if this is what's on jdk7u/jdk7u it looks good to me. We tested this
> fine on linuxppc64 and aixppc64.
>
The PPC64 bit is, yes. I've been waiting to push the security updates
there since November... :/
> Best regards,
> Goetz.
>
> > -----Original Message-----
> > From: jdk7u-dev [mailto:jdk7u-dev-bounces at openjdk.java.net] On Behalf Of
> > Andrew Hughes
> > Sent: Dienstag, 10. Januar 2017 23:28
> > To: jdk7u-dev <jdk7u-dev at openjdk.java.net>
> > Subject: Re: [PATCH] jdk7u121-b00 retro-active security patch review
> >
> >
> >
> > ----- Original Message -----
> > >
> > >
> > > ----- Original Message -----
> > > > We have a new release of IcedTea (http://bitly.com/it20608) and a new
> > > > OpenJDK
> > > > 7 release, u121-b00, to go with it. This is made from the current state
> > > > of
> > > > the
> > > > OpenJDK 7u repositories plus backports of the new security fixes
> > > > included
> > > > in
> > > > 8u111.
> > > >
> > > > The tarball is available here:
> > > >
> > > >
> > https://java.net/projects/openjdk7/downloads/download/openjdk7u121-
> > b00.tar.xz
> > > >
> > > > SHA256 checksum:
> > > >
> > > >
> > 291f0aa2f3aa04d215e88bec01a1dbe90d972e950370ad29efe6bfd30a9c33c9
> > > > openjdk7u121-b00.tar.xz
> > > >
> > > > Changes since u111-b01:
> > > > - S6624200: Regression test fails:
> > > > test/closed/javax/swing/JMenuItem/4654927/bug4654927.java
> > > > - S6882559: new JEditorPane("text/plain","") fails for null context
> > > > class
> > > > loader
> > > > - S7090158: Networking Libraries don't build with javac -Werror
> > > > - S7125055: ContentHandler.getContent API changed in error
> > > > - S7145960: sun/security/mscapi/ShortRSAKey1024.sh failing on
> > windows
> > > > - S7172012: Make test-in-build an option (Queens)
> > > > - S7187051: ShortRSAKeynnn.sh tests should do cleanup before start
> > test
> > > > - S8000626: Implement dead key detection for KeyEvent on Linux
> > > > - S8000897: VM crash in CompileBroker
> > > > - S8003890: corelibs test scripts should pass TESTVMOPTS
> > > > - S8005629: javac warnings compiling java.awt.EventDispatchThread and
> > > > sun.awt.X11.XIconWindow
> > > > - S8010297: Missing isLoggable() checks in logging code
> > > > - S8010782: clean up source files containing carriage return
> > > > characters
> > > > - S8014431: cleanup warnings indicated by the -Wunused-value
> > compiler
> > > > option on linux
> > > > - S8015265: revise the fix for 8007037
> > > > - S8016491: PPC64 (part 2): Clean up PPC defines.
> > > > - S8016586: PPC64 (part 3): basic changes for PPC64
> > > > - S8016696: PPC64 (part 4): add relocation for trampoline stubs
> > > > - S8016747: Replace deprecated PlatformLogger isLoggable(int) with
> > > > isLoggable(Level)
> > > > - S8017313: PPC64 (part 6): stack handling improvements
> > > > - S8017317: PPC64 (part 7): cppInterpreter: implement support for
> > biased
> > > > locking
> > > > - S8019517: PPC64 (part 102): cppInterpreter: implement G1 support
> > > > - S8019518: PPC64 (part 103): cppInterpreter: implement support for
> > > > compressed Oops
> > > > - S8019519: PPC64 (part 105): C interpreter: implement support for
> > > > jvmti
> > > > early return.
> > > > - S8019929: PPC64 (part 107): Extend ELF-decoder to support PPC64
> > > > function
> > > > descriptor tables
> > > > - S8019973: PPC64 (part 11): Fix IA64 preprocessor conditionals on
> > > > AIX.
> > > > - S8020121: PPC64: fix build in cppInterpreter after 8019519
> > > > - S8020190: Fatal: Bug in native code: jfieldID must match object
> > > > - S8020708: NLS mnemonics missing in SwingSet2/JInternalFrame demo
> > > > - S8024344: PPC64 (part 112): C argument in register AND stack slot.
> > > > - S8024468: PPC64 (part 201): cppInterpreter: implement bytecode
> > > > profiling
> > > > - S8024469: PPC64 (part 202): cppInterpreter: support for OSR.
> > > > - S8024756: method grouping tabs are not selectable
> > > > - S8024854: PPC64: Basic changes and files to build the class library
> > > > on
> > > > AIX
> > > > - S8024900: PPC64: Enable new build on AIX (jdk part)
> > > > - S8026741: jdk8 l10n resource file translation update 5
> > > > - S8029957: PPC64 (part 213): cppInterpreter: memory ordering for
> > object
> > > > initialization
> > > > - S8033168: PPC64: gcc 4.8 warning in output_c.cpp
> > > > - S8034797: AIX: Fix os::naked_short_sleep() in os_aix.cpp after
> > > > 8028280
> > > > - S8035396: Introduce accessor for tmp_oop in frame.
> > > > - S8035647: PPC64: Support for elf v2 abi.
> > > > - S8036767: PPC64: Support for little endian execution model
> > > > - S8036976: PPC64: implement the template interpreter
> > > > - S8037915: PPC64/AIX: Several smaller fixes
> > > > - S8042309: Some bugfixes for the ppc64 port
> > > > - S8048147: Privilege tests with JAAS Subject.doAs
> > > > - S8048357: PKCS basic tests
> > > > - S8049171: Additional tests for jarsigner's warnings
> > > > - S8050942: PPC64: implement template interpreter for ppc64le
> > > > - S8050972: Concurrency problem in PcDesc cache
> > > > - S8056122: Upgrade JDK to use LittleCMS 2.6
> > > > - S8057934: Upgrade to LittleCMS 2.6 breaks AIX build
> > > > - S8059177: jdk8u40 l10n resource file translation update 1
> > > > - S8067364: Printing to Postscript doesn't support dieresis
> > > > - S8069590: AIX port of "8050807: Better performing performance data
> > > > handling"
> > > > - S8075584: test for 8067364 depends on hardwired text advance
> > > > - S8076486: [TESTBUG]
> > javax/security/auth/Subject/doAs/NestedActions.java
> > > > fails if extra VM options are given
> > > > - S8077953: [TEST_BUG]
> > > > com/sun/management/OperatingSystemMXBean/TestTotalSwap.java
> > Compilation
> > > > failed after JDK-8077387
> > > > - S8078482: ppc: pass thread to throw_AbstractMethodError
> > > > - S8080190: PPC64: Fix wrong rotate instructions in the .ad file
> > > > - S8080628: No mnemonics on Open and Save buttons in JFileChooser
> > > > - S8083601: jdk8u60 l10n resource file translation update 2
> > > > - S8139258: PPC64LE: argument passing problem when passing 15 floats
> > in
> > > > native call
> > > > - S8139421: PPC64LE: MacroAssembler::bxx64_patchable kill register
> > > > R12
> > > > - S8140530: Creating a VolatileImage with size 0,0 results in no
> > > > longer
> > > > working g2d.drawString
> > > > - S8142926: OutputAnalyzer's shouldXXX() calls return this
> > > > - S8143134: L10n resource file translation update
> > > > - S8147077: IllegalArgumentException thrown by
> > > > api/java_awt/Component/FlipBufferStrategy/indexTGF_General
> > > > - S8148127: IllegalArgumentException thrown by JCK test
> > > > api/java_awt/Component/FlipBufferStrategy/indexTGF_General in
> > opengl
> > > > pipeline
> > > > - S8148487: PPC64: Better byte behavior
> > > > - S8150611: Security problem on sun.misc.resources.Messages*
> > > > - S8151921: Improved page resolution
> > > > - S8155968: Update command line options
> > > > - S8155973: Tighten jar checks
> > > > - S8157176: Improved classfile parsing
> > > > - S8157653: [Parfait] Uninitialised variable in awt_Font.cpp
> > > > - S8157739: Classloader Consistency Checking
> > > > - S8157749: Improve handling of DNS error replies
> > > > - S8157753: Audio replay enhancement
> > > > - S8157759: LCMS Transform Sampling Enhancement
> > > > - S8157764: Better handling of interpolation plugins
> > > > - S8158260: PPC64: unaligned Unsafe.getInt can lead to the generation
> > of
> > > > illegal instructions
> > > > - S8158302: Handle contextual glyph substitutions
> > > > - S8158734: JEditorPane.createEditorKitForContentType throws NPE
> > after
> > > > 6882559
> > > > - S8158993: Service Menu services
> > > > - S8159495: Fix index offsets
> > > > - S8159503: Amend Annotation Actions
> > > > - S8159511: Stack map validation
> > > > - S8159515: Improve indy validation
> > > > - S8159519: Reformat JDWP messages
> > > > - S8159684: (tz) Support tzdata2016f
> > > > - S8160090: Better signature handling in pack200
> > > > - S8160094: Improve pack200 layout
> > > > - S8160098: Clean up color profiles
> > > > - S8160591: Improve internal array handling
> > > > - S8160838: Better HTTP service
> > > > - S8160934: isnan() is not available on older MSVC compilers
> > > > - S8162411: Service Menu services 2
> > > > - S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh failing
> > > > after
> > > > JDK-8155968
> > > > - S8162511: 8u111 L10n resource file updates
> > > > - S8162792: Remove constraint DSA keySize < 1024 from
> > > > jdk.jar.disabledAlgorithms in jdk8
> > > > - S8164452: 8u111 L10n resource file update - msgdrop 20
> > > > - S8165807: PPC64: Backport PPC64 port to OpenJDK 7
> > > > - S8165816: jarsigner -verify shows jar unsigned if it was signed
> > > > with a
> > > > weak algorithm
> > > > - S8166381: Back out changes to the java.security file to not disable
> > > > MD5
> > > > - S8167144: Fix aix after 8022507: SIGSEGV at
> > > > ParMarkBitMap::verify_clear()
> > > > - S8167198: Changes to make AIX compile after the merge
> > > > - S8167335: Fix build on Linux with 64kb default page size
> > > >
> > > > Webrevs for the new changes:
> > > >
> > > > http://cr.openjdk.java.net/~andrew/openjdk7/20161018/root/
> > > > http://cr.openjdk.java.net/~andrew/openjdk7/20161018/corba/
> > > > http://cr.openjdk.java.net/~andrew/openjdk7/20161018/jaxp/
> > > > http://cr.openjdk.java.net/~andrew/openjdk7/20161018/jaxws/
> > > > http://cr.openjdk.java.net/~andrew/openjdk7/20161018/hotspot/
> > > > http://cr.openjdk.java.net/~andrew/openjdk7/20161018/jdk/
> > > > http://cr.openjdk.java.net/~andrew/openjdk7/20161018/langtools/
> > > >
> > > > Once approved, I'll push these to the OpenJDK 7 repository.
> > > > --
> > > > Andrew :)
> > > >
> > > > Senior Free Java Software Engineer
> > > > Red Hat, Inc. (http://www.redhat.com)
> > > >
> > > > PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
> > > > Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222
> > > >
> > > >
> > > >
> > >
> > > Ping?
> > > --
> > > Andrew :)
> > >
> > > Senior Free Java Software Engineer
> > > Red Hat, Inc. (http://www.redhat.com)
> > >
> > > PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
> > > Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222
> > >
> > >
> > >
> >
> > Ping 2?
> > --
> > Andrew :)
> >
> > Senior Free Java Software Engineer
> > Red Hat, Inc. (http://www.redhat.com)
> >
> > PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
> > Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222
> >
>
>
--
Andrew :)
Senior Free Java Software Engineer
Red Hat, Inc. (http://www.redhat.com)
PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222
More information about the jdk7u-dev
mailing list