OpenJDK 7u341 Released

Andrew Brygin abrygin at azul.com
Fri Apr 22 12:32:28 UTC 2022


Hello,

   I would like to announce the release of OpenJDK 7u341.

   The release sources are in the git repo:
   https://github.com/openjdk/jdk7u

* Security fixes in this release:
   JDK-8275151: Improved Object Identification
   JDK-8277227: Better identification of OIDs
   JDK-8277672: Better invocation handler handling
   JDK-8270504: Better Xpath expression handling
   JDK-8278972: Improve URL supports
   JDK-8278805: Enhance BMP image loading
   JDK-8278449: Improve keychain support
   JDK-8269938: Enhance XML processing passes redux
   JDK-8278356: Improve file creation
   JDK-8282397: createTempFile method of java.io.File is failing when 
called with suffix of spaces character
JDK-8282300: Throws NamingException instead of InvalidNameException 
after JDK-8278972
   JDK-8278008: Improve Santuario processing
   JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
   JDK-8272255: Completely handle MIDI files
   JDK-8274221: More definite BER encodings
   JDK-8284548: Invalid XPath expression causes 
StringIndexOutOfBoundsException
   JDK-8284920: Incorrect Token type causes XPath expression to return 
empty result

* Other fixes:
   JDK-8285357: Update .jcheck/conf file for 7u move to git

* Added tags:
   jdk7u341-b00: the start of the update 341.
   jdk7u341-b01: the proposed set of fixes.
   jdk7u341-ga: the same node as jdk7u341-b01.

* Notes on some issues:

     xml/jaxp:
     New XML Processing Limits
     ========================================================
     Added three new processing limits:
     jdk.xml.xpathExprGrpLimit (by default 10, 0 or less means no limit)
     jdk.xml.xpathExprOpLimit  (by default 100, 0 or less means no limit)
     jdk.xml.xpathTotalOpLimit (by default 10000, 0 or less means no limit)
     The limits may be set as system properties or in jaxp.properties
     file; for XSLT processor - via TransformerFactory.

     core-libs/javax.naming:
     Parsing of URL Strings in Built-In JNDI Providers Is More Strict
     ================================================================
     Added three system properties to control strength of some URLs
     parsing. Properties are:
        com.sun.jndi.ldapURLParsing
        com.sun.jndi.dnsURLParsing
        com.sun.jndi.rmiURLParsing
     with acceptable values "legacy", "compat", "strict".
     The default is always "compat";
     "legacy" would turn validation off;
     "strict" may reject some URLs unless all their fragments are
      explicitly supported by Uri subclass.

     security-libs/java.security
     Trusted Certificate Entries in macOS KeychainStore
     ==================================================
     Starting from this release only certificates added with the system
     macOS "security add-trusted-cert" command will be treated as Trusted
     Certificate Entries in the macOS KeychainStore

Thanks,
Andrew







More information about the jdk7u-dev mailing list