OpenJDK 8u222 Released
Andrew John Hughes
gnu.andrew at redhat.com
Tue Jul 16 21:22:52 UTC 2019
We are pleased to announce the release of OpenJDK 8u222.
The source tarball is available from:
* https://openjdk-sources.osci.io/openjdk8/openjdk8u222-b10.tar.xz
The tarball is accompanied by a digital signature available at:
* https://openjdk-sources.osci.io/openjdk8/openjdk8u222-b10.tar.xz.sig
This is signed by our new Red Hat OpenJDK key (openjdk at redhat.com):
PGP Key: rsa4096/0x92EF8D39DC13168F (hkp://keys.gnupg.net)
Fingerprint = CA5F 11C6 CE22 644D 42C6 AC44 92EF 8D39 DC13 168F
SHA256 checksums:
4937dc03e5a6a0bec34576b3300799ee0edc80029c938ffcfc55a9f5ef10d304
openjdk8u222-b10.tar.xz
1ead0e3ce8c5eb4ef13a7580781b643c7fe21d01cc67e4cb54d34c9d023d1888
openjdk8u222-b10.tar.xz.sig
The checksums can be downloaded from:
* https://openjdk-sources.osci.io/openjdk8/openjdk8u222-b10.sha256
What's New?
===========
Security fixes
- S8191073: JpegImageReader throws IndexOutOfBoundsException when
trying to read image data from tables-only image
- S8208698, CVE-2019-2745: Improved ECC Implementation
- S8212328, CVE-2019-2762: Exceptional throw cases
- S8213431, CVE-2019-2766: Improve file protocol handling
- S8213432, CVE-2019-2769: Better copies of CopiesList
- S8216381, CVE-2019-2786: More limited privilege usage
- S8217563: Improve realm maintenance
- S8218863: Better endpoint checks
- S8218873: Improve JSSE endpoint checking
- S8218876, CVE-2019-7317: Improve PNG support options
- S8219018: Adjust positions of glyphs
- S8219020: Table alternate substitutions
- S8219775: Certificate validation improvements
- S8220192: Better outlook for SecureRandom
- S8220517: Enhanced GIF support
- S8221518, CVE-2019-2816: Normalize normalization
- S8223511, CVE-2019-2842: Extended AES support
Other changes
- S7100957: SOCKS proxying does not work with IPv6 connections
- S7102541: RFE: os::set_native_thread_name() cleanups
- S8019816: [TEST_BUG][macosx]
closed/java/awt/BasicStroke/DashZeroWidth.java not on EDT
- S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java fails
intermittently
- S8025209: Intermittent test failure
java/net/Socket/asyncClose/AsyncClose.java
- S8030690: TEST_BUG java/nio/Buffer/Chars.java fails intermittently
- S8031113: TEST_BUG:
java/nio/channels/AsynchronousChannelGroup/Basic.java fails intermittently
- S8031145: Re-examine closed i18n tests to see it they can be moved
to the jdk repository.
- S8031563: TEST_BUG:
java/nio/channels/Selector/ChangingInterests.java failed once
- S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed because
of SocketTimeoutException
- S8040211: Update LSR datafile for BCP 47
- S8044289: In ImageIO.write() and ImageIO.read() null stream is not
handled properly.
- S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can cause
RasterFormatException
- S8055705: Rename UnixPrintServiceLookup and Win32PrintServiceLookup
as a platform neutral class name
- S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with product
builds due to missing UnlockDiagnosticVMOptions
- S8059575: JEP-JDK-8043304: Test task: Tiered Compilation level
transition tests
- S8073078: java/nio/file/FileStore/Basic.java sensitive to NFS
configuration
- S8075939: Stream.flatMap() causes breaking of short-circuiting of
terminal operations
- S8129988: JSSE should create a single instance of the cacerts KeyStore
- S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to verify
the dump
- S8135248: Add utility methods to check indexes and ranges
- S8137231: sun/security/rsa/SpecTest.java timeout with Agent error:
java.lang.Exception
- S8142493: Utility methods to check indexes and ranges doesn't
specify behavior when function produces null
- S8143097: java/net/ipv6tests/UdpTest.java fails intermittently with
"checkTime failed: got 1998 expected 4000"
- S8144332: HSDB could not terminate when close button is pushed.
- S8146458: Improve exception reporting for
Objects.checkIndex/checkFromToIndex/checkFromIndexSize
- S8150013: ParNew: Prune nmethods scavengable list.
- S8151225: Mark SpecTest.java as intermittently failing
- S8151226: Mark UdpTest.java as intermittently failing
- S8151322: Implement os::set_native_thread_name() on Solaris
- S8151539: Remove duplicate AlwaysTrueClosures
- S8153732: Windows remote printer changes do not reflect in
lookupPrintServices()
- S8154156: PPC64: improve array copy stubs by using vector instructions
- S8154387: Parallel unordered Stream.limit() tries to collect 128
elements even if limit is less
- S8155794: Move Objects.checkIndex BiFunction accepting methods to an
internal package
- S8156035: Remove intermittent key from sun/security/rsa/SpecTest.java
- S8157287: java/nio/file/FileStore/Basic.java failed with
"java.nio.file.AccessDeniedException : /zones/zoneone/root "
- S8157792: After Integrating tzdata2016d the
test/sun/util/calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
"Asia/Qyzylorda" Timezones
- S8158232: PPC64: improve byte, int and long array copy stubs by
using VSX instructions
- S8166684: PPC64: implement intrinsic code with vector instructions
for Unsafe.copyMemory()
- S8171000: Robot.createScreenCapture() crashes in wayland mode
- S8173910: (fs) java/nio/file/FileSystem/Basic.java should
conditionally check FileStores
- S8176100: [REDO][REDO] G1 Needs pre barrier on dereference of weak
JNI handles
- S8176237: (fs) java/nio/file/FileStore/Basic.java should
conditionally check FileStores
- S8177472: Remove hard-coded IANA Subtag Registry map in
LocaleEquivalentMap.java
- S8179098: Crypto AES/ECB encryption/decryption performance
regression (introduced in jdk9b73)
- S8181594: Efficient and constant-time modular arithmetic
- S8182999: SunEC throws ProviderException on invalid curves
- S8185969: PPC64: Improve VSR support to use up to 64 registers
- S8187946: Support ISO 4217 Amendments 163 and 164
- S8189131: Open-source the Oracle JDK Root Certificates
- S8189949: Remove Baltimore Cybertrust Code Signing CA
- S8190974: Parallel stream execution within a custom ForkJoinPool
should obey the parallelism
- S8191031: Remove several Symantec Root CAs
- S8191404: Upgrading JDK with latest available LSR data from IANA.
- S8191844: Remove SECOM root (secomevrootca1)
- S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
- S8193552: ISO 4217 amendment 165
- S8193830: Xalan Update: Xalan Java 2.7.2
- S8195478: sun/text/resources/LocaleDataTest.java fails with
java.lang.Exception
- S8195774: Add Entrust root certificates
- S8195793: Remove GTE CyberTrust Global Root
- S8196141: Add GoDaddy root certificates
- S8196775: java/net/Socket/asyncClose/Race.java failed intermittently
on Windows with ConnectException: Connection refused
- S8197546: Fix for 8171000 breaks Solaris + Linux builds
- S8199779: Add T-Systems, GlobalSign and Starfield services root
certificates
- S8201317: X25519/X448 code improvements
- S8202026: ISO 4217 amendment 166
- S8202414: Unsafe write after primitive array creation may result in
array length change
- S8202651: Test ComodoCA.java fails
- S8202768: [macos] Appkit thread slows when any Window Manager active
- S8202884: SA: Attach/detach might fail on Linux if debugee
application create/destroy threads during attaching
- S8203190: SessionId.hashCode generates too many collisions
- S8203228: Branch-free output conversion for X25519 and X448
- S8203627: Swing applications with JRadioButton and JCheckbox fail to
render correctly when using GTK3 and the GTK L&F
- S8203872: Upgrading JDK with latest available LSR data from IANA.
- S8204269: ISO 4217 amendment 167
- S8204923: Restore Symantec root verisignclass2g2ca
- S8204929: Fonts with embedded bitmaps are not always rotated
- S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle both,
RPATH and RUNPATH
- S8206955: MethodHandleProxies.asInterfaceInstance does not support
default methods
- S8207760: SAXException: Invalid UTF-16 surrogate detected: d83c ?
- S8208648: ECC Field Arithmetic Enhancements
- S8208746: ISO 4217 Amendment #168 update
- S8209506: Add Google Trust Services GlobalSign root certificates
- S8209775: ISO 4217 Amendment #169 update
- S8209951: Problematic sparc intrinsic:
com.sun.crypto.provider.CipherBlockChaining
- S8210153: localized currency symbol of VES
- S8210416: [linux] Poor StrictMath performance due to non-optimized
compilation
- S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
without optimization
- S8210432: Add additional TeliaSonera root certificate
- S8210886: Remove references in xwindows.md to non-existent files.
- S8210985: Update the default SSL session cache size to 20480
- S8212202: [Windows] Exception if no printers are installed.
- S8213183: InputMethod cannot be used after its restarting
- S8213213: Remove src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
- S8213294: Upgrade IANA LSR data
- S8213825: assert(false) failed: Non-balanced monitor enter/exit!
Likely JNI locking
- S8214109: XToolkit is not correctly displayed color on 16-bit high
color setting
- S8214111: There is no icon in all JOptionPane target image
- S8214112: The whole text in target JPasswordField image are not selected
- S8214252: Expanded & Collapsed nodes of a JTree look the same on GTK3
- S8214253: Tooltip is transparent rather than having a black background
- S8214765: All TrayIcon MessageType icons does not show up with gtk3
option set
- S8214770: java/time/test/java/time/format/TestNonIsoFormatter.java
failed in non-english locales.
- S8214935: Upgrade IANA LSR data
- S8215982: (tz) Upgrade time-zone data to tzdata2018i
- S8216577: Add GlobalSign's R6 Root certificate
- S8217263: Automate DashOffset test
- S8217315: Proper units should print more significant digits
- S8217597: [TESTBUG] old version docker does not support --cpus
- S8218020: Back out accidental changes that belong elsewhere
- S8218020: Fix version number in mesa.md 3rd party legal file
- S8218152: [javac] fails and exits with no error if a bad annotation
processor provided
- S8218469: JSlider display issue with slider for GTKLookAndFeel
- S8218470: JScrollBar display issue with GTKLookAndFeel
- S8218472: JProgressBar display issue with GTKLookAndFeel
- S8218473: JOptionPane display issue with GTKLookAndFeel
- S8218479: JTextPane display issue with GTKLookAndFeel
- S8218674: HTML Tooltip with "img=src" on component doesn't show
- S8219781: Localized names for Japanese era Reiwa in COMPAT provider
- S8220349: The fix done for JDK-8214253 have caused issues in JTree
behaviour
- S8220495: Update GIFlib library to the 5.1.8
- S8220718: Missing ResourceMark in nmethod::metadata_do
- S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard to use
- S8221412: lookupPrintServices() does not always update the list of
Windows remote printers
- S8221789: make reconfigure broken (jdk8u only)
- S8222136: Remove two Comodo root CA certificates that are expiring
- S8222137: Remove T-Systems root CA certificate
- S8222670: pathological case of JIT recompilation and code cache bloat
- S8222965: Backport of JDK-8129988 broke the build
- S8222975: Fix 'release' file to reflect actual repo checkin used to
compile JDK
- S8223499: Remove two DocuSign root certificates that are expiring
- S8223537: testlibrary_tests/ctw/ClassesListTest.java fails with
Agent timeout frequently
- S8223555: Cleanups in cacerts tests
- S8223664: Add jtreg tests for 8223528, backport to jdk8u of 8176100
- S8223883: Fix jni.cpp copyright date after 8223528
- S8224560: (tz) Upgrade time-zone data to tzdata2019a
- S8224727: Problem list test
security/infra/java/security/cert/CertPathValidator/certification/ActalisCA.java
- S8225065: Revert 8221166 (8u backport of 8048782)
- S8225580: tzdata2018i integration causes test failures on jdk-13
- S8225716: G1 GC: Undefined behaviour in
G1BlockOffsetTablePart::block_at_or_preceding
--
Andrew :)
Senior Free Java Software Engineer
Red Hat, Inc. (http://www.redhat.com)
PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222
https://keybase.io/gnu_andrew
More information about the jdk8u-dev
mailing list