OpenJDK 8u232 Released

Andrew John Hughes gnu.andrew at redhat.com
Tue Oct 15 23:11:02 UTC 2019 

We are pleased to announce the release of OpenJDK 8u232.

The source tarball is available from:

* https://openjdk-sources.osci.io/openjdk8/openjdk8u232-ga.tar.xz

The tarball is accompanied by a digital signature available at:

* https://openjdk-sources.osci.io/openjdk8/openjdk8u232-ga.tar.xz.sig

This is signed by our Red Hat OpenJDK key (openjdk at redhat.com):

PGP Key: rsa4096/0x92EF8D39DC13168F (hkp://keys.gnupg.net)
Fingerprint = CA5F 11C6 CE22 644D 42C6  AC44 92EF 8D39 DC13 168F

SHA256 checksums:

5d135c4a9f84e918b190de6f106b0341414d12614b01d728c253450e760627b6
openjdk8u232-ga.tar.xz
52c11d337eeba252dc681137cf002a8caceff482e119c04cde9cd2bfd2a77366
openjdk8u232-ga.tar.xz.sig

The checksums can be downloaded from:

* https://openjdk-sources.osci.io/openjdk8/openjdk8u232-ga.sha256

What's New?
===========
Security fixes
  - S8167646: Better invalid FilePermission
  - S8213429, CVE-2019-2933: Windows file handling redux
  - S8218573, CVE-2019-2945: Better socket support
  - S8218877: Help transform transformers
  - S8220186: Improve use of font temporary files
  - S8220302, CVE-2019-2949: Better Kerberos ccache handling
  - S8221497: Optional Panes in Swing
  - S8221858, CVE-2019-2958: Build Better Processes
  - S8222684, CVE-2019-2964: Better support for patterns
  - S8222690, CVE-2019-2962: Better Glyph Images
  - S8223163: Better pattern recognition
  - S8223505, CVE-2019-2973: Better pattern compilation
  - S8223518, CVE-2019-2975: Unexpected exception in jjs
  - S8223892, CVE-2019-2978: Improved handling of jar files
  - S8224025: Fix for JDK-8220302 is not complete
  - S8224532, CVE-2019-2981: Better Path supports
  - S8224915, CVE-2019-2983: Better serial attributes
  - S8225286, CVE-2019-2987: Better rendering of native glyphs
  - S8225292, CVE-2019-2988: Better Graphics2D drawing
  - S8225298, CVE-2019-2989: Improve TLS connection support
  - S8225597, CVE-2019-2992: Enhance font glyph mapping
  - S8226765, CVE-2019-2999: Commentary on Javadoc comments
  - S8227129: Better ligature for subtables
  - S8227601: Better collection of references
  - S8228825, CVE-2019-2894: Enhance ECDSA operations
Other changes
  - S6913047: Long term memory leak when using PKCS11 and JCE exceeds 32
bit process address space
  - S6946830: javax.crypto.Cipher.doFinal behavior differs depending on
platform
  - S6996807: FieldReflectorKey hash code computation can be improved
  - S8030993: Check jdk/src/share/native/common/jni_util.c for JNI
pending exceptions
  - S8038392: Generating prelink cache breaks JAVA 'jinfo' utility
normal behaviour
  - S8075136: Unnecessary sign extension for byte array access
  - S8075544: Add tiered testing definitions to the jdk repo
  - S8075546: Add tiered testing definitions to the langtools repo
  - S8075573: Add jdk_other and jdk_svc to jdk tier 2 test definition
  - S8080157: assert(allocates2(pc)) failed: not in CodeBuffer memory
  - S8087128: C2: Disallow definition split on MachCopySpill nodes
  - S8139965: Hang seen when using com.sun.jndi.ldap.search.replyQueueSize
  - S8141570: Fix Zero interpreter build for --disable-precompiled-headers
  - S8147502: Digest is incorrectly truncated for ECDSA signatures when
the bit length of n is less than the field size
  - S8147611: G1 - Missing memory barrier in start_cset_region_for_worker
  - S8151066: assert(0 <= i && i < length()) failed: index out of bounds
  - S8151486: Class.forName causes memory leak
  - S8152856: Xcode 7.3 -Wshift-negative-value compile failure on Mac OS X
  - S8153732: Windows remote printer changes do not reflect in
lookupPrintServices()
  - S8155951: VM crash in nsk/jvmti/RedefineClasses/StressRedefine:
assert failed: Corrupted constant pool
  - S8157792: After Integrating tzdata2016d the
test/sun/util/calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
"Asia/Qyzylorda" Timezones
  - S8168417: Pending exceptions in java.base/windows/native/libnio
  - S8170494: JNI exception pending in PlainDatagramSocketImpl.c
  - S8178870: instrumentation.retransformClasses cause coredump
  - S8182999: SunEC throws ProviderException on invalid curves
  - S8185900: hotspot build failed with gcc version Red Hat 4.4.7-3
  - S8185979: PPC64: Implement SHA2 intrinsic
  - S8188868: PPC64: Support AES intrinsics on Big Endian
  - S8197930: JNI exception pending in initializeEncoding of jni_util.c
  - S8202252: (aio) Closed AsynchronousSocketChannel keeps completion
handler alive
  - S8202353: os::readdir should use readdir instead of readdir_r
  - S8202948: C2: assert(init_offset >= 0) failed: positive offset from
object start
  - S8203324: Use out of scope in getMacOSXLocale of java_props_macosx.c:120
  - S8205587: Implicit function declaration in jni_util.c
  - S8206879: Currency decimal marker incorrect for Peru
  - S8210761: libjsig is being compiled without optimization
  - S8211232: GraphKit::make_runtime_call() sometimes attaches wrong
memory state to call
  - S8212202: [Windows] Exception if no printers are installed.
  - S8213561: ZipFile/MultiThreadedReadTest.java timed out in tier1
  - S8214002: Cannot use italic font style if the font has embedded bitmap
  - S8214687: Optimize Collections.nCopies().hashCode() and equals()
  - S8214702: Wrong text position for whitespaced string in printing
Swing text
  - S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
  - S8215265: C2: range check elimination may allow illegal out of bound
access
  - S8215982: (tz) Upgrade time-zone data to tzdata2018i
  - S8216597: SIGBUS in
Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after JDK-6913047
  - S8216965: crash in freetypeScaler.c CopyBW2Grey8
  - S8217359: C2 compiler triggers SIGSEGV after transformation in
ConvI2LNode::Ideal
  - S8217676: Upgrade libpng to 1.6.37
  - S8217731: Font rendering and glyph spacing changed from jdk-8 to jdk-11
  - S8217785: Padding ParallelTaskTerminator::_offered_termination variable
  - S8217896: Make better use of LCPUs when building on AIX
  - S8218201: Failures when vmIntrinsics::_getClass is not inlined
  - S8218280: LineNumberReader throws "Mark invalid" exception if CRLF
straddles buffer.
  - S8218721: C1's CEE optimization produces safepoint poll with invalid
debug information
  - S8218780: Update MUSCLE PCSC-Lite header files
  - S8218781: Localized names for Japanese era Reiwa in COMPAT provider
  - S8218854: FontMetrics.getMaxAdvance may be less than the maximum
FontMetrics.charWidth
  - S8219517: assert(false) failed: infinite loop in PhaseIterGVN::optimize
  - S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
  - S8220072: GCC 8.3 reports errors in java.base
  - S8220513: Wrapper Key may get deleted when closing sessions in
SunPKCS11 crypto provider
  - S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard to use
  - S8221304: Problem list java/awt/FontMetrics/MaxAdvanceIsMax.java
  - S8221412: lookupPrintServices() does not always update the list of
Windows remote printers
  - S8222108: Reduce minRefreshTime for updating remote printer list on
Windows
  - S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK 8u
  - S8222980: Upgrade IANA Language Subtag Registry to Version 2019-04-03
  - S8223177: Data race on JvmtiEnvBase::_tag_map in double-checked locking
  - S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to duplicate
-fstack-protector flags, overriding --with-extra-cflags
  - S8223227: Rename acquire_tag_map() to tag_map_acquire() in jvmtiEnvBase
  - S8224560: (tz) Upgrade time-zone data to tzdata2019a
  - S8224580: Matcher can cause oop field/array element to be reloaded
  - S8225423: GTK L&F: JSplitPane: There is no divider shown
  - S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
dependent libraries
  - S8225580: tzdata2018i integration causes test failures on jdk-13
  - S8225636: SA can't handle prelinked libraries
  - S8226392: Launcher should not enable legacy stdio streams on
GNU/Linux (glibc)
  - S8226543: Reduce GC pressure during message digest calculations in
password-based encryption
  - S8226607: Inconsistent info between pcsclite.md and MUSCLE headers
  - S8226798: JVM crash in
klassItable::initialize_itable_for_interface(int, InstanceKlass*, bool,
Thread*)
  - S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
  - S8226928: [TESTBUG] test/java/net/NetworkInterface/IPv4Only.java
fails intermittently on AIX
  - S8226964: [Yaru] GTK L&F: There is no difference between menu
selected and de-selected
  - S8227018: CompletableFuture should not call
Runtime.availableProcessors on fast path
  - S8228405: Incorrect format strings in PhaseIdealLoop::rc_predicate
  - S8228440: TestAESCiphers tests fail with "access denied" trying to
access ArrayUtil
  - S8228469: (tz) Upgrade time-zone data to tzdata2019b
  - S8230085: (fs) FileStore::isReadOnly is always true on macOS Catalina
  - S8231098: (tz) Upgrade time-zone data to tzdata2019c
  - S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java test in 8u

-- 
Andrew :)

Senior Free Java Software Engineer
Red Hat, Inc. (http://www.redhat.com)

PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
Fingerprint = 5132 579D D154 0ED2 3E04  C5A0 CFDA 0F9B 3596 4222
https://keybase.io/gnu_andrew

More information about the jdk8u-dev mailing list