OpenJDK 7u231 Released

[Andrew John Hughes]

We are pleased to announce the release of OpenJDK 7u231.

The source tarball is available from:

* https://openjdk-sources.osci.io/openjdk7/openjdk7u231-b01.tar.xz

The tarball is accompanied by a digital signature available at:

* https://openjdk-sources.osci.io/openjdk7/openjdk7u231-b01.tar.xz.sig

This is signed by our new Red Hat OpenJDK key (openjdk at redhat.com):

PGP Key: rsa4096/0x92EF8D39DC13168F (hkp://keys.gnupg.net)
Fingerprint = CA5F 11C6 CE22 644D 42C6  AC44 92EF 8D39 DC13 168F

SHA256 checksums:

e0fa058b02448e1e2944294dd50fcb00d7acc9db2ce724a259c2b4022c89eec7
openjdk7u231-b01.tar.xz
1018ee5bb5837fd8c436363ca7154a3967d3d1de90adee2c72b650159aa5a2d3
openjdk7u231-b01.tar.xz.sig

The checksums can be downloaded from:

* https://openjdk-sources.osci.io/openjdk7/openjdk7u231-b01.sha256

What's New?
===========
* Security fixes
  - S8191073: JpegImageReader throws IndexOutOfBoundsException when
trying to read image data from tables-only image
  - S8208698, CVE-2019-2745: Improved ECC Implementation
  - S8212328, CVE-2019-2762: Exceptional throw cases
  - S8213431, CVE-2019-2766: Improve file protocol handling
  - S8213432, CVE-2019-2769: Better copies of CopiesList
  - S8216381, CVE-2019-2786: More limited privilege usage
  - S8217563: Improve realm maintenance
  - S8218873: Improve JSSE endpoint checking
  - S8218876, CVE-2019-7317: Improve PNG support options
  - S8219018: Adjust positions of glyphs
  - S8219020: Table alternate substitutions
  - S8219775: Certificate validation improvements
  - S8220192: Better outlook for SecureRandom
  - S8220517: Enhanced GIF support
  - S8221518, CVE-2019-2816: Normalize normalization
  - S8223511, CVE-2019-2842: Extended AES support
* Other fixes
- S7152169: TEST_BUG: sun/security/tools/jarsigner/ec.sh occasionally
fail due to keytool error on sparc
  - S7194075: Various classes of sunec.jar are duplicated in rt.jar
  - S7198901: correct the field size check when decoding a point on ECC
curve
  - S8006799: Optimize sun.nio.cs.ISO_8859_1$Encode.encodeArrayLoop()
(jdk part of 6896617)
  - S8031145: Re-examine closed i18n tests to see it they can be moved
to the jdk repository.
  - S8035974: Refactor DigestBase.engineUpdate() method for better code
generation by JIT compiler
  - S8135248: Add utility methods to check indexes and ranges
  - S8142493: Utility methods to check indexes and ranges doesn't
specify behavior when function produces null
  - S8146458: Improve exception reporting for
Objects.checkIndex/checkFromToIndex/checkFromIndexSize
  - S8155794: Move Objects.checkIndex BiFunction accepting methods to an
internal package
  - S8159035: CTSMode.java test crashed due to unhandled case of cipher
length value as 0
  - S8179098: Crypto AES/ECB encryption/decryption performance
regression (introduced in jdk9b73)
  - S8181594: Efficient and constant-time modular arithmetic
  - S8182999: SunEC throws ProviderException on invalid curves
  - S8187946: Support ISO 4217 Amendments 163 and 164
  - S8193552: ISO 4217 amendment 165
  - S8195478: sun/text/resources/LocaleDataTest.java fails with
java.lang.Exception
  - S8201317: X25519/X448 code improvements
  - S8202026: ISO 4217 amendment 166
  - S8203228: Branch-free output conversion for X25519 and X448
  - S8204269: ISO 4217 amendment 167
  - S8208648: ECC Field Arithmetic Enhancements
  - S8208746: ISO 4217 Amendment #168 update
  - S8209775: ISO 4217 Amendment #169 update
  - S8210153: localized currency symbol of VES
  - S8211435: Exception in thread "AWT-EventQueue-1"
java.lang.IllegalArgumentException: null source
  - S8215982: (tz) Upgrade time-zone data to tzdata2018i
  - S8218781: Localized names for Japanese era Reiwa in COMPAT provider
  - S8224560: (tz) Upgrade time-zone data to tzdata2019a

-- 
Andrew :)

Senior Free Java Software Engineer
Red Hat, Inc. (http://www.redhat.com)

PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
Fingerprint = 5132 579D D154 0ED2 3E04  C5A0 CFDA 0F9B 3596 4222
https://keybase.io/gnu_andrew