OpenJDK 8u422 Released

Andrew Hughes gnu.andrew at redhat.com
Tue Jul 16 23:41:39 UTC 2024 

We are pleased to announce the release of OpenJDK 8u422.

The source tarball is available from:

* https://openjdk-sources.osci.io/openjdk8/openjdk8u422-b05.tar.xz

The tarball is accompanied by a digital signature available at:

* https://openjdk-sources.osci.io/openjdk8/openjdk8u422-b05.tar.xz.sig

This is signed by our Red Hat OpenJDK key (openjdk at redhat.com):

PGP Key: rsa4096/0x92EF8D39DC13168F (hkp://keys.gnupg.net)
Fingerprint = CA5F 11C6 CE22 644D 42C6  AC44 92EF 8D39 DC13 168F

SHA256 checksums:

c447e801b2d66823af320710738c44d51e6d62496569d39bfbe5d0dd822bd8c5  openjdk8u422-b05.tar.xz
c9a2fbd80217ad5b220f6382317d8b8042f2431202c695a48753761aa3a51fc7  openjdk8u422-b05.tar.xz.sig

SHA512 checksums:

bfd595a5a5748034a2daa5cd60524a2ebec51399e050d2912ab2da88712acaf07ae34e01bac05db96daac5f48d3e7272914854b47679e879ffd7d6debd6bcdab  openjdk8u422-b05.tar.xz
9fe865257d4f6b7e3c4a82a321f40512cdeb53d7541e0b90749a7f6eb8a8d00b68804345a18ddc885c52d5f8d8c163bc5c2680c3e10a78c45e5660e740695434  openjdk8u422-b05.tar.xz.sig

The checksums can be downloaded from:

* https://openjdk-sources.osci.io/openjdk8/openjdk8u422-b05.sha256
* https://openjdk-sources.osci.io/openjdk8/openjdk8u422-b05.sha512

New in release OpenJDK 8u422 (2024-07-16):
===========================================
Live versions of these release notes can be found at:
  * https://bit.ly/openjdk8u422

* CVEs
  - CVE-2024-21131
  - CVE-2024-21138
  - CVE-2024-21140
  - CVE-2024-21144
  - CVE-2024-21145
  - CVE-2024-21147
* Security fixes
  - JDK-8314794: Improve UTF8 String supports
  - JDK-8319859: Better symbol storage
  - JDK-8320097: Improve Image transformations
  - JDK-8320548: Improved loop handling
  - JDK-8322106: Enhance Pack 200 loading
  - JDK-8323231: Improve array management
  - JDK-8323390: Enhance mask blit functionality
  - JDK-8324559: Improve 2D image handling
  - JDK-8325600: Better symbol storage
* Other changes
  - JDK-8025439: [TEST BUG] [macosx] PrintServiceLookup.lookupPrintServices doesn't work properly since jdk8b105
  - JDK-8069389: CompilerOracle prefix wildcarding is broken for long strings
  - JDK-8159454: [TEST_BUG] javax/swing/ToolTipManager/7123767/bug7123767.java: number of checked graphics configurations should be limited
  - JDK-8159690: [TESTBUG] Mark headful tests with @key headful.
  - JDK-8198321: javax/swing/JEditorPane/5076514/bug5076514.java fails
  - JDK-8203691: [TESTBUG] Test /runtime/containers/cgroup/PlainRead.java fails
  - JDK-8205407: [windows, vs<2017] C4800 after 8203197
  - JDK-8235834: IBM-943 charset encoder needs updating
  - JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error: Cp943 - can't read properly"
  - JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese characters were garbled
  - JDK-8256152: tests fail because of ambiguous method resolution
  - JDK-8258855: Two tests sun/security/krb5/auto/ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java failed on OL8.3
  - JDK-8262017: C2: assert(n != __null) failed: Bad immediate dominator info.
  - JDK-8268916: Tests for AffirmTrust roots
  - JDK-8278067: Make HttpURLConnection default keep alive timeout configurable
  - JDK-8291226: Create Test Cases to cover scenarios for JDK-8278067
  - JDK-8291637: HttpClient default keep alive timeout not followed if server sends invalid value
  - JDK-8291638: Keep-Alive timeout of 0 should close connection immediately
  - JDK-8293562: KeepAliveCache Blocks Threads while Closing Connections
  - JDK-8303466: C2: failed: malformed control flow. Limit type made precise with MaxL/MinL
  - JDK-8304074: [JMX] Add an approximation of total bytes allocated on the Java heap by the JVM
  - JDK-8313081: MonitoringSupport_lock should be unconditionally initialized after 8304074
  - JDK-8315020: The macro definition for LoongArch64 zero build is not accurate.
  - JDK-8316138: Add GlobalSign 2 TLS root certificates
  - JDK-8318410: jdk/java/lang/instrument/BootClassPath/BootClassPathTest.sh fails on Japanese Windows
  - JDK-8320005: Allow loading of shared objects with .a extension on AIX
  - JDK-8324185: [8u] Accept Xcode 12+ builds on macOS
  - JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/AKISerialNumber.java is failing
  - JDK-8325927: [8u] Backport of JDK-8170552 missed part of the test
  - JDK-8326686: Bump update version of OpenJDK: 8u422
  - JDK-8327440: Fix "bad source file" error during beaninfo generation
  - JDK-8328809: [8u] Problem list some CA tests
  - JDK-8328825: Google CAInterop test failures
  - JDK-8329544: [8u] sun/security/krb5/auto/ReplayCacheTestProc.java cannot find the testlibrary
  - JDK-8331791: [8u] AIX build break from JDK-8320005 backport
  - JDK-8331980: [8u] Problem list CAInterop.java#certignarootca test
  - JDK-8335552: [8u] JDK-8303466 backport to 8u requires 3 ::Identity signature fixes

Notes on individual issues:
===========================

core-libs/java.net:

JDK-8278067: Make HttpURLConnection Default Keep Alive Timeout Configurable
===========================================================================
Two system properties have been added which control the keep alive
behavior of HttpURLConnection in the case where the server does not
specify a keep alive time. These are:

* `http.keepAlive.time.server`
* `http.keepAlive.time.proxy`

which control the number of seconds before an idle connection to a
server or proxy will be closed, respectively. If the server or proxy
specifies a keep alive time in a "Keep-Alive" response header, this
will take precedence over the values of these properties.

security-libs/java.security:

JDK-8316138: Add GlobalSign 2 TLS root certificates
===================================================
The following root certificates have been added to the cacerts
truststore:

Name: GlobalSign
Alias Name: globalsignr46
Distinguished Name: CN=GlobalSign Root R46, O=GlobalSign nv-sa, C=BE

Name: GlobalSign
Alias Name: globalsigne46
Distinguished Name: CN=GlobalSign Root E46, O=GlobalSign nv-sa, C=BE

Happy hacking,
-- 
Andrew :)
Pronouns: he / him or they / them
Principal Free Java Software Engineer
OpenJDK Package Owner
Red Hat, Inc. (http://www.redhat.com)

PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
Fingerprint = 5132 579D D154 0ED2 3E04  C5A0 CFDA 0F9B 3596 4222

Please contact via e-mail, not proprietary chat networks
Available on Libera Chat & OFTC IRC networks as gnu_andrew
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/jdk8u-dev/attachments/20240717/afb5f69c/signature.asc>

More information about the jdk8u-dev mailing list