|
|
|
|
@ -3,6 +3,669 @@ Key:
|
|
|
|
|
JDK-X - https://bugs.openjdk.java.net/browse/JDK-X
|
|
|
|
|
CVE-XXXX-YYYY: https://cve.mitre.org/cgi-bin/cvename.cgi?name=XXXX-YYYY
|
|
|
|
|
|
|
|
|
|
New in release OpenJDK 11.0.18 (2023-01-17):
|
|
|
|
|
=============================================
|
|
|
|
|
Live versions of these release notes can be found at:
|
|
|
|
|
* https://bit.ly/openjdk11018
|
|
|
|
|
* https://builds.shipilev.net/backports-monitor/release-notes-11.0.18.html
|
|
|
|
|
|
|
|
|
|
* Other changes
|
|
|
|
|
- JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
|
|
|
|
|
- JDK-6782021: It is not possible to read local computer certificates with the SunMSCAPI provider
|
|
|
|
|
- JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/ScreenInsetsTest.java fails in Windows
|
|
|
|
|
- JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
|
|
|
|
|
- JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java fails
|
|
|
|
|
- JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java failed
|
|
|
|
|
- JDK-8029633: Raw inner class constructor ref should not perform diamond inference
|
|
|
|
|
- JDK-8030121: java/awt/dnd/MissingDragExitEventTest/MissingDragExitEventTest.java fails
|
|
|
|
|
- JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/RepaintTest.java fails
|
|
|
|
|
- JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/RobotWheelTest.java fails
|
|
|
|
|
- JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/ModalInternalFrameTest.java
|
|
|
|
|
- JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/MultiresolutionIconTest.java
|
|
|
|
|
- JDK-8172269: When checking the default behaviour for a scroll tab layout and checking the 'opaque' checkbox, the area behind tabs is not red.
|
|
|
|
|
- JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java failed with timeout
|
|
|
|
|
- JDK-8193942: Regression automated test '/open/test/jdk/javax/swing/JFrame/8175301/ScaledFrameBackgroundTest.java' fails
|
|
|
|
|
- JDK-8194126: Regression automated Test '/open/test/jdk/javax/swing/JColorChooser/Test7194184.java' fails
|
|
|
|
|
- JDK-8198343: Test java/awt/print/PrinterJob/TestPgfmtSetMPA.java may fail w/o printer
|
|
|
|
|
- JDK-8199290: [TESTBUG] sun.hotspot.WhiteBox$WhiteBoxPermission is not copied
|
|
|
|
|
- JDK-8202836: [macosx] test java/awt/Graphics/TextAAHintsTest.java fails
|
|
|
|
|
- JDK-8206125: [windows] cannot pass relative path to --with-boot-jdk
|
|
|
|
|
- JDK-8210047: some pages contain content outside of landmark region
|
|
|
|
|
- JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips testing for non-corner-case values
|
|
|
|
|
- JDK-8212096: javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java failed intermittently due to SSLException: Tag mismatch
|
|
|
|
|
- JDK-8213239: Configure cannot handle command overrides with arguments
|
|
|
|
|
- JDK-8215571: jdb does not include jdk.* in the default class filter
|
|
|
|
|
- JDK-8217032: Check pandoc capabilities in configure
|
|
|
|
|
- JDK-8222091: Javadoc does not handle package annotations correctly on package-info.java
|
|
|
|
|
- JDK-8222251: preflow visitor is not visiting lambda expressions
|
|
|
|
|
- JDK-8226236: win32: gc/metaspace/TestCapacityUntilGCWrapAround.java fails
|
|
|
|
|
- JDK-8227179: Test for new gc+metaspace=info output format
|
|
|
|
|
- JDK-8227651: Tests fail with SSLProtocolException: Input record too big
|
|
|
|
|
- JDK-8228672: [TESTBUG] gc/metaspace/TestSizeTransitions.java fails on 32-bit platforms
|
|
|
|
|
- JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on macOs
|
|
|
|
|
- JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java fails on macos
|
|
|
|
|
- JDK-8233565: [TESTBUG] NullModalityDialogTest.java fails on MacOS
|
|
|
|
|
- JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on macos
|
|
|
|
|
- JDK-8239708: Split basics.m4 into basic.m4 and util.m4
|
|
|
|
|
- JDK-8240281: Remove failing assertion code when selecting first memory state in SuperWord::co_locate_pack
|
|
|
|
|
- JDK-8242468: VS2019 build missing vcruntime140_1.dll
|
|
|
|
|
- JDK-8243565: some gc tests use 'test.java.opts' and not 'test.vm.opts'
|
|
|
|
|
- JDK-8243568: serviceability/logging/TestLogRotation.java uses 'test.java.opts' and not 'test.vm.opts'
|
|
|
|
|
- JDK-8244010: Simplify usages of ProcessTools.createJavaProcessBuilder in our tests
|
|
|
|
|
- JDK-8244557: test/jdk/javax/swing/JTabbedPane/TestBackgroundScrollPolicy.java failed
|
|
|
|
|
- JDK-8247676: vcruntime140_1.dll is not needed on 32-bit Windows
|
|
|
|
|
- JDK-8249694: java/lang/StringBuffer/HugeCapacity.java and j/l/StringBuilder/HugeCapacity.java tests shouldn't be @ignore-d
|
|
|
|
|
- JDK-8253877: gc/g1/TestGCLogMessages.java fails - missing "Evacuation failure" message
|
|
|
|
|
- JDK-8254874: ZGC: JNIHandleBlock verification failure in stack watermark processing
|
|
|
|
|
- JDK-8254976: Re-enable swing jtreg tests which were broken due to samevm mode
|
|
|
|
|
- JDK-8255439: System Tray icons get corrupted when Windows scaling changes
|
|
|
|
|
- JDK-8256109: Create implementation for NSAccessibilityButton protocol
|
|
|
|
|
- JDK-8257679: Improved unix compatibility layer in Windows build (winenv)
|
|
|
|
|
- JDK-8257722: Improve "keytool -printcert -jarfile" output
|
|
|
|
|
- JDK-8258005: JDK build fails with incorrect fixpath script
|
|
|
|
|
- JDK-8259485: Document need for short paths when building on Windows
|
|
|
|
|
- JDK-8260272: bash configure --prefix does not work after JDK-8257679
|
|
|
|
|
- JDK-8261336: IGV: enhance default filters
|
|
|
|
|
- JDK-8261445: Use memory_order_relaxed for os::random().
|
|
|
|
|
- JDK-8261758: [TESTBUG] gc/g1/TestGCLogMessages.java fails if ergonomics detect too small InitialHeapSize
|
|
|
|
|
- JDK-8263326: Remove ReceiverTypeData check from serviceability/sa/TestPrintMdo.java
|
|
|
|
|
- JDK-8263871: On sem_destroy() failing we should assert
|
|
|
|
|
- JDK-8264593: debug.cpp utilities should be available in product builds.
|
|
|
|
|
- JDK-8264666: Change implementation of safeAdd/safeMult in the LCMSImageLayout class
|
|
|
|
|
- JDK-8266082: AssertionError in Annotate.fromAnnotations with -Xdoclint
|
|
|
|
|
- JDK-8266967: debug.cpp utility find() should print Java Object fields.
|
|
|
|
|
- JDK-8268361: Fix the infinite loop in next_line
|
|
|
|
|
- JDK-8268860: Windows-Aarch64 build is failing in GitHub actions
|
|
|
|
|
- JDK-8268893: jcmd to trim the glibc heap
|
|
|
|
|
- JDK-8269029: compiler/codegen/TestCharVect2.java fails for client VMs
|
|
|
|
|
- JDK-8269873: serviceability/sa/Clhsdb tests are using a C2 specific VMStruct field
|
|
|
|
|
- JDK-8272123: Problem list 4 jtreg tests which regularly fail on macos-aarch64
|
|
|
|
|
- JDK-8273236: keytool does not accurately warn about algorithms that are disabled but have additional constraints
|
|
|
|
|
- JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also has similar error of JDK-8253368
|
|
|
|
|
- JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails on macOS 12
|
|
|
|
|
- JDK-8273685: Remove jtreg tag manual=yesno for java/awt/Graphics/LCDTextAndGraphicsState.java & show test instruction
|
|
|
|
|
- JDK-8274029: Remove jtreg tag manual=yesno for java/awt/print/Dialog/DialogOrient.java
|
|
|
|
|
- JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/PrinterJob/ImagePrinting/ImageTypes.java & show test UI
|
|
|
|
|
- JDK-8274296: Update or Problem List tests which may fail with uiScale=2 on macOS
|
|
|
|
|
- JDK-8274456: Remove jtreg tag manual=yesno java/awt/print/PrinterJob/PageDialogTest.java
|
|
|
|
|
- JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java fails when GC cycles are not happening
|
|
|
|
|
- JDK-8274597: Some of the dnd tests time out and fail intermittently
|
|
|
|
|
- JDK-8275170: Some jtreg sound tests should be marked with sound keyword
|
|
|
|
|
- JDK-8275535: Retrying a failed authentication on multiple LDAP servers can lead to users blocked
|
|
|
|
|
- JDK-8276841: Add support for Visual Studio 2022
|
|
|
|
|
- JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by ignoring /run/user/* mount points
|
|
|
|
|
- JDK-8277497: Last column cell in the JTable row is read as empty cell
|
|
|
|
|
- JDK-8277881: Missing SessionID in TLS1.3 resumption in compatibility mode
|
|
|
|
|
- JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/NoInvalidateSocketException.java fails with "tag mismatch"
|
|
|
|
|
- JDK-8279066: entries.remove(entry) is useless in PKCS12KeyStore
|
|
|
|
|
- JDK-8279695: [TESTBUG] modify compiler/loopopts/TestSkeletonPredicateNegation.java to run on C1 also
|
|
|
|
|
- JDK-8280158: New test from JDK-8274736 failed with/without patch in JDK11u
|
|
|
|
|
- JDK-8280550: SplittableRandom#nextDouble(double,double) can return result >= bound
|
|
|
|
|
- JDK-8280863: Update build README to reflect that MSYS2 is supported
|
|
|
|
|
- JDK-8280890: Cannot use '-Djava.system.class.loader' with class loader in signed JAR
|
|
|
|
|
- JDK-8280948: Write a regression test for JDK-4659800
|
|
|
|
|
- JDK-8280950: RandomGenerator:NextDouble() default behavior non conformant after JDK-8280550 fix
|
|
|
|
|
- JDK-8281183: RandomGenerator:NextDouble() default behavior partially fixed by JDK-8280950
|
|
|
|
|
- JDK-8281296: Create a regression test for JDK-4515999
|
|
|
|
|
- JDK-8281297: TestStressG1Humongous fails with guarantee(is_range_uncommitted)
|
|
|
|
|
- JDK-8282046: Create a regression test for JDK-8000326
|
|
|
|
|
- JDK-8282276: Problem list failing two Robot Screen Capture tests
|
|
|
|
|
- JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid link access
|
|
|
|
|
- JDK-8282345: handle latest VS2022 in abstract_vm_version
|
|
|
|
|
- JDK-8282402: Create a regression test for JDK-4666101
|
|
|
|
|
- JDK-8282640: Create a test for JDK-4740761
|
|
|
|
|
- JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/LoadUnloadGC2.java fails intermittently with exit code 1
|
|
|
|
|
- JDK-8282730: LdapLoginModule throw NPE from logout method after login failure
|
|
|
|
|
- JDK-8282777: Create a Regression test for JDK-4515031
|
|
|
|
|
- JDK-8282778: Create a regression test for JDK-4699544
|
|
|
|
|
- JDK-8282857: Create a regression test for JDK-4702690
|
|
|
|
|
- JDK-8282936: Write a regression test for JDK-4615365
|
|
|
|
|
- JDK-8282937: Write a regression test for JDK-4820080
|
|
|
|
|
- JDK-8283199: Linux os::cpu_microcode_revision() stalls cold startup
|
|
|
|
|
- JDK-8283422: Create a new test for JDK-8254790
|
|
|
|
|
- JDK-8284294: Create an automated regression test for RFE 4138746
|
|
|
|
|
- JDK-8284358: Unreachable loop is not removed from C2 IR, leading to a broken graph
|
|
|
|
|
- JDK-8284521: Write an automated regression test for RFE 4371575
|
|
|
|
|
- JDK-8284690: [macos] VoiceOver : Getting java.lang.IllegalArgumentException: Invalid location on Editable JComboBox
|
|
|
|
|
- JDK-8284732: FFI_GO_CLOSURES macro not defined but required for zero build on Mac OS X
|
|
|
|
|
- JDK-8284752: Zero does not build on Mac OS X due to missing os::current_thread_enable_wx implementation
|
|
|
|
|
- JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java failed with "AssertionError: Expected IOException to be thrown, but nothing was thrown"
|
|
|
|
|
- JDK-8284884: Replace polling with waiting in javax/swing/text/html/parser/Parser/8078268/bug8078268.java
|
|
|
|
|
- JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile fails when named value doesn't exist
|
|
|
|
|
- JDK-8285305: Create an automated test for JDK-4495286
|
|
|
|
|
- JDK-8285373: Create an automated test for JDK-4702233
|
|
|
|
|
- JDK-8285604: closed sun/java2d/GdiRendering/ClipShapeRendering.java failed with "Incorrect color ffeeeeee instead of ff0000ff in pixel (100, 100)"
|
|
|
|
|
- JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/PrintARGBImage.java manual test
|
|
|
|
|
- JDK-8285698: Create a test to check the focus stealing of JPopupMenu from JComboBox
|
|
|
|
|
- JDK-8285794: AsyncGetCallTrace might acquire a lock via JavaThread::thread_from_jni_environment
|
|
|
|
|
- JDK-8285836: sun/net/www/http/KeepAliveCache/KeepAliveProperty.java failed with "RuntimeException: Failed in server"
|
|
|
|
|
- JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/AttachReturnError.java fails on Alpine
|
|
|
|
|
- JDK-8286624: Regression Test CoordinateTruncationBug.java fails on OL8.3
|
|
|
|
|
- JDK-8286663: Resolve IDE warnings in WTrayIconPeer and SystemTray
|
|
|
|
|
- JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/DropTargetInInternalFrameTest.html times out and fails in Windows
|
|
|
|
|
- JDK-8286872: Refactor add/modify notification icon (TrayIcon)
|
|
|
|
|
- JDK-8287076: Document.normalizeDocument() produces different results
|
|
|
|
|
- JDK-8287091: aarch64 : guarantee(val < (1ULL << nbits)) failed: Field too big for insn
|
|
|
|
|
- JDK-8287425: Remove unnecessary register push for MacroAssembler::check_klass_subtype_slow_path
|
|
|
|
|
- JDK-8287609: macOS: SIGSEGV at [CoreFoundation] CFArrayGetCount / sun.font.CFont.getTableBytesNative
|
|
|
|
|
- JDK-8287724: Fix various issues with msys2
|
|
|
|
|
- JDK-8287826: javax/accessibility/4702233/AccessiblePropertiesTest.java fails to compile
|
|
|
|
|
- JDK-8287895: Some langtools tests fail on msys2
|
|
|
|
|
- JDK-8287896: PropertiesTest.sh fail on msys2
|
|
|
|
|
- JDK-8287902: UnreadableRB case in MissingResourceCauseTest is not working reliably on Windows
|
|
|
|
|
- JDK-8287917: System.loadLibrary does not work on Big Sur if JDK is built with macOS SDK 10.15 and earlier
|
|
|
|
|
- JDK-8288132: Update test artifacts in QuoVadis CA interop tests
|
|
|
|
|
- JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit compiling xerces
|
|
|
|
|
- JDK-8288377: [REDO] DST not applying properly with zone id offset set with TZ env variable
|
|
|
|
|
- JDK-8288445: AArch64: C2 compilation fails with guarantee(!true || (true && (shift != 0))) failed: impossible encoding
|
|
|
|
|
- JDK-8288599: com/sun/management/OperatingSystemMXBean/TestTotalSwap.java: Expected total swap size ... but getTotalSwapSpaceSize returned ...
|
|
|
|
|
- JDK-8288985: P11TlsKeyMaterialGenerator should work with ChaCha20-Poly1305
|
|
|
|
|
- JDK-8289043: C2: Vector constant materialization attempt
|
|
|
|
|
- JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java fails on linux ppc64le machine with missing Memory and Swap Limit output
|
|
|
|
|
- JDK-8290207: Missing notice in dom.md
|
|
|
|
|
- JDK-8290209: jcup.md missing additional text
|
|
|
|
|
- JDK-8290451: Incorrect result when switching to C2 OSR compilation from C1
|
|
|
|
|
- JDK-8290529: C2: assert(BoolTest(btest).is_canonical()) failure
|
|
|
|
|
- JDK-8290705: StringConcat::validate_mem_flow asserts with "unexpected user: StoreI"
|
|
|
|
|
- JDK-8290711: assert(false) failed: infinite loop in PhaseIterGVN::optimize
|
|
|
|
|
- JDK-8290781: Segfault at PhaseIdealLoop::clone_loop_handle_data_uses
|
|
|
|
|
- JDK-8291459: JVM crash with GenerateOopMap::error_work(char const*, __va_list_tag*)
|
|
|
|
|
- JDK-8291461: assert(false) failed: bad AD file
|
|
|
|
|
- JDK-8292083: Detected container memory limit may exceed physical machine memory
|
|
|
|
|
- JDK-8292158: AES-CTR cipher state corruption with AVX-512
|
|
|
|
|
- JDK-8292541: [Metrics] Reported memory limit may exceed physical machine memory
|
|
|
|
|
- JDK-8292682: Code change of JDK-8282730 not updated to reflect CSR update
|
|
|
|
|
- JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString wrong placing of free
|
|
|
|
|
- JDK-8292866: Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check MultiByteToWideChar return value for failures
|
|
|
|
|
- JDK-8292887: Bump update version for OpenJDK: jdk-11.0.18
|
|
|
|
|
- JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX platform
|
|
|
|
|
- JDK-8293044: C1: Missing access check on non-accessible class
|
|
|
|
|
- JDK-8293472: Incorrect container resource limit detection if manual cgroup fs mounts present
|
|
|
|
|
- JDK-8293540: [Metrics] Incorrectly detected resource limits with additional cgroup fs mounts
|
|
|
|
|
- JDK-8293578: Duplicate ldc generated by javac
|
|
|
|
|
- JDK-8293672: Update freetype md file
|
|
|
|
|
- JDK-8293816: CI: ciBytecodeStream::get_klass() is not consistent
|
|
|
|
|
- JDK-8293826: Closed test fails after JDK-8276108 on aarch64
|
|
|
|
|
- JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java still fails when GC cycles are not happening
|
|
|
|
|
- JDK-8293834: Update CLDR data following tzdata 2022c update
|
|
|
|
|
- JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr) failed: must have PC
|
|
|
|
|
- JDK-8294138: [11u] Revert change from JDK-8210962 in basic.m4
|
|
|
|
|
- JDK-8294307: ISO 4217 Amendment 173 Update
|
|
|
|
|
- JDK-8294357: (tz) Update Timezone Data to 2022d
|
|
|
|
|
- JDK-8294578: [PPC64] C2: Missing is_oop information when using disjoint compressed oops mode
|
|
|
|
|
- JDK-8294740: Add cgroups keyword to TestDockerBasic.java
|
|
|
|
|
- JDK-8295173: (tz) Update Timezone Data to 2022e
|
|
|
|
|
- JDK-8295288: Some vm_flags tests associate with a wrong BugID
|
|
|
|
|
- JDK-8295322: Tests for JDK-8271459 were not backported to 11u
|
|
|
|
|
- JDK-8295429: Update harfbuzz md file
|
|
|
|
|
- JDK-8295469: S390X: Optimized builds are broken
|
|
|
|
|
- JDK-8295554: Move the "sizecalc.h" to the correct location
|
|
|
|
|
- JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
|
|
|
|
|
- JDK-8295714: GHA ::set-output is deprecated and will be removed
|
|
|
|
|
- JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr check before frame constructor
|
|
|
|
|
- JDK-8295952: Problemlist existing compiler/rtm tests also on x86
|
|
|
|
|
- JDK-8296108: (tz) Update Timezone Data to 2022f
|
|
|
|
|
- JDK-8296480: java/security/cert/pkix/policyChanges/TestPolicy.java is failing
|
|
|
|
|
- JDK-8296485: BuildEEBasicConstraints.java test fails with SunCertPathBuilderException
|
|
|
|
|
- JDK-8296496: Overzealous check in sizecalc.h prevents large memory allocation
|
|
|
|
|
- JDK-8296632: Write a test to verify the content change of TextArea sends TextEvent
|
|
|
|
|
- JDK-8296652: Restore windows aarch64 fixpath patch that was removed in 8239708
|
|
|
|
|
- JDK-8296715: CLDR v42 update for tzdata 2022f
|
|
|
|
|
- JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
|
|
|
|
|
- JDK-8297147: UnexpectedSourceImageSize test times out on slow machines when fastdebug is used
|
|
|
|
|
- JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java fails again
|
|
|
|
|
- JDK-8297241: Update sun/java2d/DirectX/OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
|
|
|
|
|
- JDK-8297481: Create a regression test for JDK-4424517
|
|
|
|
|
- JDK-8297656: AArch64: Enable AES/GCM Intrinsics
|
|
|
|
|
- JDK-8297804: (tz) Update Timezone Data to 2022g
|
|
|
|
|
- JDK-8298737: 8296772 backport to jdk11u caused build error on sparc
|
|
|
|
|
|
|
|
|
|
Notes on individual issues:
|
|
|
|
|
===========================
|
|
|
|
|
|
|
|
|
|
security-libs/javax.crypto:
|
|
|
|
|
|
|
|
|
|
JDK-6782021: Windows KeyStore Updated to Include Access to the Local Machine Location
|
|
|
|
|
=====================================================================================
|
|
|
|
|
The Windows KeyStore support in the SunMSCAPI provider has been
|
|
|
|
|
expanded to include access to the local machine location. The new
|
|
|
|
|
keystore types are:
|
|
|
|
|
|
|
|
|
|
* "Windows-MY-LOCALMACHINE"
|
|
|
|
|
* "Windows-ROOT-LOCALMACHINE"
|
|
|
|
|
|
|
|
|
|
The following keystore types were also added, allowing developers to
|
|
|
|
|
make it clear they map to the current user:
|
|
|
|
|
|
|
|
|
|
* "Windows-MY-CURRENTUSER" (same as "Windows-MY")
|
|
|
|
|
* "Windows-ROOT-CURRENTUSER" (same as "Windows-ROOT")
|
|
|
|
|
|
|
|
|
|
security-libs/java.security:
|
|
|
|
|
|
|
|
|
|
JDK-8282730: New Implementation Note for LoginModule on Removing Null from a Principals or Credentials Set
|
|
|
|
|
==========================================================================================================
|
|
|
|
|
Back in OpenJDK 9, JDK-8015081 changed the Set implementation used to
|
|
|
|
|
hold principals and credentials so that it rejected null
|
|
|
|
|
values. Attempts to call add(null), contains(null) or remove(null)
|
|
|
|
|
were changed to throw a NullPointerException.
|
|
|
|
|
|
|
|
|
|
However, the logout() methods in the LoginModule implementations
|
|
|
|
|
within the JDK were not updated to check for null values, which may
|
|
|
|
|
occur in the event of a failed login. As a result, a logout() call may
|
|
|
|
|
throw a NullPointerException.
|
|
|
|
|
|
|
|
|
|
The LoginModule implementations have now been updated with such checks
|
|
|
|
|
and an implementation note added to the specification to suggest that
|
|
|
|
|
the same change is made in third party modules. Developers of third
|
|
|
|
|
party modules are advised to verify that their logout() method does not
|
|
|
|
|
throw a NullPointerException.
|
|
|
|
|
|
|
|
|
|
New in release OpenJDK 11.0.17 (2022-10-18):
|
|
|
|
|
=============================================
|
|
|
|
|
Live versions of these release notes can be found at:
|
|
|
|
|
* https://bit.ly/openjdk11017
|
|
|
|
|
* https://builds.shipilev.net/backports-monitor/release-notes-11.0.17.html
|
|
|
|
|
|
|
|
|
|
* Security fixes
|
|
|
|
|
- JDK-8282252: Improve BigInteger/Decimal validation
|
|
|
|
|
- JDK-8285662: Better permission resolution
|
|
|
|
|
- JDK-8286077, CVE-2022-21618: Wider MultiByte conversions
|
|
|
|
|
- JDK-8286511: Improve macro allocation
|
|
|
|
|
- JDK-8286519: Better memory handling
|
|
|
|
|
- JDK-8286526, CVE-2022-21619: Improve NTLM support
|
|
|
|
|
- JDK-8286533, CVE-2022-21626: Key X509 usages
|
|
|
|
|
- JDK-8286910, CVE-2022-21624: Improve JNDI lookups
|
|
|
|
|
- JDK-8286918, CVE-2022-21628: Better HttpServer service
|
|
|
|
|
- JDK-8287446: Enhance icon presentations
|
|
|
|
|
- JDK-8288508: Enhance ECDSA usage
|
|
|
|
|
- JDK-8289366, CVE-2022-39399: Improve HTTP/2 client usage
|
|
|
|
|
- JDK-8289853: Update HarfBuzz to 4.4.1
|
|
|
|
|
- JDK-8290334: Update FreeType to 2.12.1
|
|
|
|
|
- JDK-8293429: [11u] minor update in attribute style
|
|
|
|
|
* Other changes
|
|
|
|
|
- JDK-6606767: resexhausted00[34] fail assert(!thread->owns_locks(), "must release all locks when leaving VM")
|
|
|
|
|
- JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14 & jdk7
|
|
|
|
|
- JDK-7131823: bug in GIFImageReader
|
|
|
|
|
- JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/bug4634626.java sometimes failed on mac
|
|
|
|
|
- JDK-8028265: Add legacy tz tests to OpenJDK
|
|
|
|
|
- JDK-8069343: Improve gc/g1/TestHumongousCodeCacheRoots.java to use jtreg @requires
|
|
|
|
|
- JDK-8139348: Deprecate 3DES and RC4 in Kerberos
|
|
|
|
|
- JDK-8159694: HiDPI, Unity, java/awt/dnd/DropTargetEnterExitTest/MissedDragExitTest.java
|
|
|
|
|
- JDK-8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java makes not reliable time assumption
|
|
|
|
|
- JDK-8169468: NoResizeEventOnDMChangeTest.java fails because FS Window didn't receive all resizes!
|
|
|
|
|
- JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The selected index should be "aad"
|
|
|
|
|
- JDK-8183372: Refactor java/lang/Class shell tests to java
|
|
|
|
|
- JDK-8186143: keytool -ext option doesn't accept wildcards for DNS subject alternative names
|
|
|
|
|
- JDK-8193462: Fix Filer handling of package-info initial elements
|
|
|
|
|
- JDK-8203277: preflow visitor used during lambda attribution shouldn't visit class definitions inside the lambda body
|
|
|
|
|
- JDK-8208471: nsk/jdb/unwatch/unwatch002/unwatch002.java fails with "Prompt is not received during 300200 milliseconds"
|
|
|
|
|
- JDK-8209052: Low contrast in docs/api/constant-values.html
|
|
|
|
|
- JDK-8209736: runtime/RedefineTests/ModifyAnonymous.java fails with NullPointerException when running in CDS mode
|
|
|
|
|
- JDK-8210107: vmTestbase/nsk/stress/network tests fail with Cannot assign requested address (Bind failed)
|
|
|
|
|
- JDK-8210722: JAXP Tests: CatalogSupport2 and CatalogSupport3 generate incorrect messages upon failure
|
|
|
|
|
- JDK-8210960: Allow --with-boot-jdk-jvmargs to work during configure
|
|
|
|
|
- JDK-8212904: JTextArea line wrapping incorrect when using UI scale
|
|
|
|
|
- JDK-8213695: gc/TestAllocateHeapAtMultiple.java is slow in some configs
|
|
|
|
|
- JDK-8214078: (fs) SecureDirectoryStream not supported on arm32
|
|
|
|
|
- JDK-8214427: probable bug in logic of ConcurrentHashMap.addCount()
|
|
|
|
|
- JDK-8215291: Broken links when generating from project without modules
|
|
|
|
|
- JDK-8217170: gc/arguments/TestUseCompressedOopsErgo.java timed out
|
|
|
|
|
- JDK-8217332: JTREG: Clean up, use generics instead of raw types
|
|
|
|
|
- JDK-8218128: vmTestbase/nsk/jvmti/ResourceExhausted/resexhausted003 and 004 use wrong path to test classes
|
|
|
|
|
- JDK-8218413: make reconfigure ignores configure-time AUTOCONF environment variable
|
|
|
|
|
- JDK-8219074: [TESTBUG] runtime/containers/docker/TestCPUAwareness.java typo of printing parameters (period should be shares)
|
|
|
|
|
- JDK-8219149: ProcessTools.ProcessBuilder should print timing info for subprocesses
|
|
|
|
|
- JDK-8220744: [TESTBUG] Move RedefineTests from runtime to serviceability
|
|
|
|
|
- JDK-8221871: javadoc should not set role=region on <section> elements
|
|
|
|
|
- JDK-8221907: make reconfigure breaks when configured with relative paths
|
|
|
|
|
- JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/DrawString/LCDTextSrcEa.java has issues
|
|
|
|
|
- JDK-8223575: add subspace transitions to gc+metaspace=info log lines
|
|
|
|
|
- JDK-8225122: Test AncestorResized.java fails when Windows desktop is scaled.
|
|
|
|
|
- JDK-8226976: SessionTimeOutTests uses == operator for String value check
|
|
|
|
|
- JDK-8230708: Hotspot fails to build on linux-sparc with gcc-9
|
|
|
|
|
- JDK-8233712: Limit default tests jobs based on ulimit -u setting
|
|
|
|
|
- JDK-8235870: C2 crashes in IdealLoopTree::est_loop_flow_merge_sz()
|
|
|
|
|
- JDK-8236490: Compiler bug relating to @NonNull annotation
|
|
|
|
|
- JDK-8236823: Ensure that API documentation uses minified libraries
|
|
|
|
|
- JDK-8238196: tests that use SA Attach should not be allowed to run against signed binaries on Mac OS X 10.14.5 and later
|
|
|
|
|
- JDK-8238203: Return value of GetUserDefaultUILanguage() should be handled as LANGID
|
|
|
|
|
- JDK-8238268: Many SA tests are not running on OSX because they do not attempt to use sudo when available
|
|
|
|
|
- JDK-8238586: [TESTBUG] vmTestbase/jit/tiered/Test.java failed when TieredCompilation is disabled
|
|
|
|
|
- JDK-8239265: JFR: Test cleanup of jdk.jfr.api.consumer package
|
|
|
|
|
- JDK-8239379: ProblemList serviceability/sa/sadebugd/DebugdConnectTest.java on OSX
|
|
|
|
|
- JDK-8239423: jdk/jfr/jvm/TestJFRIntrinsic.java failed with -XX:-TieredCompilation
|
|
|
|
|
- JDK-8239902: [macos] Remove direct usage of JSlider, JProgressBar classes in CAccessible class
|
|
|
|
|
- JDK-8240903: Add test to check that jmod hashes are reproducible
|
|
|
|
|
- JDK-8242188: error in jtreg test jdk/jfr/api/consumer/TestRecordedFrame.java on linux-aarch64
|
|
|
|
|
- JDK-8247546: Pattern matching does not skip correctly over supplementary characters
|
|
|
|
|
- JDK-8247907: XMLDsig logging does not work
|
|
|
|
|
- JDK-8247964: All log0() in com/sun/org/slf4j/internal/Logger.java should be private
|
|
|
|
|
- JDK-8249623: test @ignore-d due to 7013634 should be returned back to execution
|
|
|
|
|
- JDK-8251152: ARM32: jtreg c2 Test8202414 test crash
|
|
|
|
|
- JDK-8251551: Use .md filename extension for README
|
|
|
|
|
- JDK-8252145: Unify Info.plist files with correct version strings
|
|
|
|
|
- JDK-8253829: Wrong length compared in SSPI bridge
|
|
|
|
|
- JDK-8253916: ResourceExhausted/resexhausted001 crashes on Linux-x64
|
|
|
|
|
- JDK-8254178: Remove .hgignore
|
|
|
|
|
- JDK-8254318: Remove .hgtags
|
|
|
|
|
- JDK-8255724: [XRender] the BlitRotateClippedArea test fails on Linux in the XR pipeline
|
|
|
|
|
- JDK-8255729: com.sun.tools.javac.processing.JavacFiler.FilerOutputStream is inefficient
|
|
|
|
|
- JDK-8257623: vmTestbase/nsk/jvmti/ResourceExhausted/resexhausted001/TestDescription.java shouldn't use timeout
|
|
|
|
|
- JDK-8258946: Fix optimization-unstable code involving signed integer overflow
|
|
|
|
|
- JDK-8261160: Add a deserialization JFR event
|
|
|
|
|
- JDK-8262085: Hovering Metal HTML Tooltips in different windows cause IllegalArgExc on Linux
|
|
|
|
|
- JDK-8264400: (fs) WindowsFileStore equality depends on how the FileStore was constructed
|
|
|
|
|
- JDK-8264792: The NumberFormat for locale sq_XK formats price incorrectly.
|
|
|
|
|
- JDK-8265020: tests must be updated for new TestNG module name
|
|
|
|
|
- JDK-8265100: (fs) WindowsFileStore.hashCode() should read cached hash code once
|
|
|
|
|
- JDK-8265531: doc/building.md should mention homebrew install freetype
|
|
|
|
|
- JDK-8266250: WebSocketTest and WebSocketProxyTest call assertEquals(List<byte[]>, List<byte[]>)
|
|
|
|
|
- JDK-8266254: Update to use jtreg 6
|
|
|
|
|
- JDK-8266460: java.io tests fail on null stream with upgraded jtreg/TestNG
|
|
|
|
|
- JDK-8266461: tools/jmod/hashes/HashesTest.java fails: static @Test methods
|
|
|
|
|
- JDK-8266490: Extend the OSContainer API to support the pids controller of cgroups
|
|
|
|
|
- JDK-8266675: Optimize IntHashTable for encapsulation and ease of use
|
|
|
|
|
- JDK-8266774: System property values for stdout/err on Windows UTF-8
|
|
|
|
|
- JDK-8266881: Enable debug log for SSLEngineExplorerMatchedSNI.java
|
|
|
|
|
- JDK-8267180: Typo in copyright header for HashesTest
|
|
|
|
|
- JDK-8267271: Fix gc/arguments/TestNewRatioFlag.java expectedNewSize calculation
|
|
|
|
|
- JDK-8267880: Upgrade the default PKCS12 MAC algorithm
|
|
|
|
|
- JDK-8268185: Update GitHub Actions for jtreg 6
|
|
|
|
|
- JDK-8269039: Disable SHA-1 Signed JARs
|
|
|
|
|
- JDK-8269517: compiler/loopopts/TestPartialPeelingSinkNodes.java crashes with -XX:+VerifyGraphEdges
|
|
|
|
|
- JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over projections
|
|
|
|
|
- JDK-8270312: Error: Not a test or directory containing tests: java/awt/print/PrinterJob/XparColor.java
|
|
|
|
|
- JDK-8271010: vmTestbase/gc/lock/malloc/malloclock04/TestDescription.java crashes intermittently
|
|
|
|
|
- JDK-8271078: jdk/incubator/vector/Float128VectorTests.java failed a subtest
|
|
|
|
|
- JDK-8271512: ProblemList serviceability/sa/sadebugd/DebugdConnectTest.java due to 8270326
|
|
|
|
|
- JDK-8272352: Java launcher can not parse Chinese character when system locale is set to UTF-8
|
|
|
|
|
- JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
|
|
|
|
|
- JDK-8273526: Extend the OSContainer API pids controller with pids.current
|
|
|
|
|
- JDK-8274506: TestPids.java and TestPidsLimit.java fail with podman run as root
|
|
|
|
|
- JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java fails with expected [true] but found [false]
|
|
|
|
|
- JDK-8274687: JDWP deadlocks if some Java thread reaches wait in blockOnDebuggerSuspend
|
|
|
|
|
- JDK-8275008: gtest build failure due to stringop-overflow warning with gcc11
|
|
|
|
|
- JDK-8275689: [TESTBUG] Use color tolerance only for XRender in BlitRotateClippedArea test
|
|
|
|
|
- JDK-8275887: jarsigner prints invalid digest/signature algorithm warnings if keysize is weak/disabled
|
|
|
|
|
- JDK-8277893: Arraycopy stress tests
|
|
|
|
|
- JDK-8278067: Make HttpURLConnection default keep alive timeout configurable
|
|
|
|
|
- JDK-8278344: sun/security/pkcs12/KeytoolOpensslInteropTest.java test fails because of different openssl output
|
|
|
|
|
- JDK-8278519: serviceability/jvmti/FieldAccessWatch/FieldAccessWatch.java failed "assert(handle != __null) failed: JNI handle should not be null"
|
|
|
|
|
- JDK-8279032: compiler/loopopts/TestSkeletonPredicateNegation.java times out with -XX:TieredStopAtLevel < 4
|
|
|
|
|
- JDK-8279385: [test] Adjust sun/security/pkcs12/KeytoolOpensslInteropTest.java after 8278344
|
|
|
|
|
- JDK-8279622: C2: miscompilation of map pattern as a vector reduction
|
|
|
|
|
- JDK-8280913: Create a regression test for JRootPane.setDefaultButton() method
|
|
|
|
|
- JDK-8281181: Do not use CPU Shares to compute active processor count
|
|
|
|
|
- JDK-8281535: Create a regression test for JDK-4670051
|
|
|
|
|
- JDK-8281569: Create tests for Frame.setMinimumSize() method
|
|
|
|
|
- JDK-8281628: KeyAgreement : generateSecret intermittently not resetting
|
|
|
|
|
- JDK-8281738: Create a regression test for checking the 'Space' key activation of focused Button
|
|
|
|
|
- JDK-8281745: Create a regression test for JDK-4514331
|
|
|
|
|
- JDK-8281988: Create a regression test for JDK-4618767
|
|
|
|
|
- JDK-8282214: Upgrade JQuery to version 3.6.0
|
|
|
|
|
- JDK-8282234: Create a regression test for JDK-4532513
|
|
|
|
|
- JDK-8282280: Update Xerces to Version 2.12.2
|
|
|
|
|
- JDK-8282343: Create a regression test for JDK-4518432
|
|
|
|
|
- JDK-8282538: PKCS11 tests fail on CentOS Stream 9
|
|
|
|
|
- JDK-8282548: Create a regression test for JDK-4330998
|
|
|
|
|
- JDK-8282555: Missing memory edge when spilling MoveF2I, MoveD2L etc
|
|
|
|
|
- JDK-8282789: Create a regression test for the JTree usecase of JDK-4618767
|
|
|
|
|
- JDK-8282860: Write a regression test for JDK-4164779
|
|
|
|
|
- JDK-8282933: Create a test for JDK-4529616
|
|
|
|
|
- JDK-8282947: JFR: Dump on shutdown live-locks in some conditions
|
|
|
|
|
- JDK-8283015: Create a test for JDK-4715496
|
|
|
|
|
- JDK-8283017: GHA: Workflows break with update release versions
|
|
|
|
|
- JDK-8283087: Create a test or JDK-4715503
|
|
|
|
|
- JDK-8283245: Create a test for JDK-4670319
|
|
|
|
|
- JDK-8283277: ISO 4217 Amendment 171 Update
|
|
|
|
|
- JDK-8283441: C2: segmentation fault in ciMethodBlocks::make_block_at(int)
|
|
|
|
|
- JDK-8283493: Create an automated regression test for RFE 4231298
|
|
|
|
|
- JDK-8283507: Create a regression test for RFE 4287690
|
|
|
|
|
- JDK-8283621: Write a regression test for CCC4400728
|
|
|
|
|
- JDK-8283623: Create an automated regression test for JDK-4525475
|
|
|
|
|
- JDK-8283624: Create an automated regression test for RFE-4390885
|
|
|
|
|
- JDK-8283712: Create a manual test framework class
|
|
|
|
|
- JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/PrinterJob/PrintGlyphVectorTest.java and fix test
|
|
|
|
|
- JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
|
|
|
|
|
- JDK-8283903: GetContainerCpuLoad does not return the correct result in share mode
|
|
|
|
|
- JDK-8284077: Create an automated test for JDK-4170173
|
|
|
|
|
- JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
|
|
|
|
|
- JDK-8284535: Fix PrintLatinCJKTest.java test that is failing with Parse Exception
|
|
|
|
|
- JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks charset
|
|
|
|
|
- JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
|
|
|
|
|
- JDK-8284754: print more interesting env variables in hs_err and VM.info
|
|
|
|
|
- JDK-8284758: [linux] improve print_container_info
|
|
|
|
|
- JDK-8284882: SIGSEGV in Node::verify_edges due to compilation bailout
|
|
|
|
|
- JDK-8284898: Enhance PassFailJFrame
|
|
|
|
|
- JDK-8284944: assert(cnt++ < 40) failed: infinite cycle in loop optimization
|
|
|
|
|
- JDK-8284950: CgroupV1 detection code should consider memory.swappiness
|
|
|
|
|
- JDK-8284956: Potential leak awtImageData/color_data when initializes X11GraphicsEnvironment
|
|
|
|
|
- JDK-8285081: Improve XPath operators count accuracy
|
|
|
|
|
- JDK-8285097: Duplicate XML keys in XPATHErrorResources.java and XSLTErrorResources.java
|
|
|
|
|
- JDK-8285380: Fix typos in security
|
|
|
|
|
- JDK-8285398: Cache the results of constraint checks
|
|
|
|
|
- JDK-8285693: Create an automated test for JDK-4702199
|
|
|
|
|
- JDK-8285696: AlgorithmConstraints:permits not throwing IllegalArgumentException when 'alg' is null
|
|
|
|
|
- JDK-8285728: Alpine Linux build fails with busybox tar
|
|
|
|
|
- JDK-8285820: C2: LCM prioritizes locally dependent CreateEx nodes over projections after 8270090
|
|
|
|
|
- JDK-8286114: [test] show real exception in bomb call in sun/rmi/runtime/Log/checkLogging/CheckLogging.java
|
|
|
|
|
- JDK-8286177: C2: "failed: non-reduction loop contains reduction nodes" assert failure
|
|
|
|
|
- JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
|
|
|
|
|
- JDK-8286314: Trampoline not created for far runtime targets outside small CodeCache
|
|
|
|
|
- JDK-8286582: Build fails on macos aarch64 when using --with-zlib=bundled
|
|
|
|
|
- JDK-8287017: Bump update version for OpenJDK: jdk-11.0.17
|
|
|
|
|
- JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
|
|
|
|
|
- JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts with freezer controller
|
|
|
|
|
- JDK-8287202: GHA: Add macOS aarch64 to the list of default platforms for workflow_dispatch event
|
|
|
|
|
- JDK-8287223: C1: Inlining attempt through MH::invokeBasic() with null receiver
|
|
|
|
|
- JDK-8287336: GHA: Workflows break on patch versions
|
|
|
|
|
- JDK-8287366: Improve test failure reporting in GHA
|
|
|
|
|
- JDK-8287432: C2: assert(tn->in(0) != __null) failed: must have live top node
|
|
|
|
|
- JDK-8287463: JFR: Disable TestDevNull.java on Windows
|
|
|
|
|
- JDK-8287663: Add a regression test for JDK-8287073
|
|
|
|
|
- JDK-8287672: jtreg test com/sun/jndi/ldap/LdapPoolTimeoutTest.java fails intermittently in nightly run
|
|
|
|
|
- JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer controller) was incomplete
|
|
|
|
|
- JDK-8288360: CI: ciInstanceKlass::implementor() is not consistent for well-known classes
|
|
|
|
|
- JDK-8288467: remove memory_operand assert for spilled instructions
|
|
|
|
|
- JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
|
|
|
|
|
- JDK-8288763: Pack200 extraction failure with invalid size
|
|
|
|
|
- JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too small
|
|
|
|
|
- JDK-8288865: [aarch64] LDR instructions must use legitimized addresses
|
|
|
|
|
- JDK-8288928: Incorrect GPL header in pnglibconf.h (backport of JDK-8185041)
|
|
|
|
|
- JDK-8289471: Issue in Initialization of keys in ErrorMsg.java and XPATHErrorResources.java
|
|
|
|
|
- JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on muslc
|
|
|
|
|
- JDK-8289486: Improve XSLT XPath operators count efficiency
|
|
|
|
|
- JDK-8289549: ISO 4217 Amendment 172 Update
|
|
|
|
|
- JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails on Alpine/musl
|
|
|
|
|
- JDK-8289799: Build warning in methodData.cpp memset zero-length parameter
|
|
|
|
|
- JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime() after JDK-8289060
|
|
|
|
|
- JDK-8290000: Bump macOS GitHub actions to macOS 11
|
|
|
|
|
- JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr) failed: must have PC
|
|
|
|
|
- JDK-8290198: Shenandoah: a few Shenandoah tests failure after JDK-8214799 11u backport
|
|
|
|
|
- JDK-8290246: test fails "assert(init != __null) failed: initialization not found"
|
|
|
|
|
- JDK-8290813: jdk/nashorn/api/scripting/test/ScriptObjectMirrorTest.java fails: assertEquals is ambiguous
|
|
|
|
|
- JDK-8290886: [11u]: Backport of JDK-8266250 introduced test failures
|
|
|
|
|
- JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
|
|
|
|
|
- JDK-8291713: assert(!phase->exceeding_node_budget()) failed: sanity after JDK-8223389
|
|
|
|
|
- JDK-8291794: [11u] Corrections after backport of JDK-8212028
|
|
|
|
|
- JDK-8292579: (tz) Update Timezone Data to 2022c
|
|
|
|
|
- JDK-8292852: [11u] TestMemoryWithCgroupV1 fails after JDK-8292768
|
|
|
|
|
- JDK-8295057: [11u] Remove designator DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.17
|
|
|
|
|
|
|
|
|
|
Notes on individual issues:
|
|
|
|
|
===========================
|
|
|
|
|
|
|
|
|
|
core-libs/java.net:
|
|
|
|
|
|
|
|
|
|
JDK-8278067: Make HttpURLConnection Default Keep Alive Timeout Configurable
|
|
|
|
|
===========================================================================
|
|
|
|
|
Two system properties have been added which control the keep alive
|
|
|
|
|
behavior of HttpURLConnection in the case where the server does not
|
|
|
|
|
specify a keep alive time. Two properties are defined for controlling
|
|
|
|
|
connections to servers and proxies separately. They are:
|
|
|
|
|
|
|
|
|
|
* `http.keepAlive.time.server`
|
|
|
|
|
* `http.keepAlive.time.proxy`
|
|
|
|
|
|
|
|
|
|
respectively. More information about them can be found on the
|
|
|
|
|
Networking Properties page:
|
|
|
|
|
https://docs.oracle.com/en/java/javase/19/docs/api/java.base/java/net/doc-files/net-properties.html.
|
|
|
|
|
|
|
|
|
|
JDK-8286918: Better HttpServer service
|
|
|
|
|
======================================
|
|
|
|
|
The HttpServer can be optionally configured with a maximum connection
|
|
|
|
|
limit by setting the jdk.httpserver.maxConnections system property. A
|
|
|
|
|
value of 0 or a negative integer is ignored and considered to
|
|
|
|
|
represent no connection limit. In the case of a positive integer
|
|
|
|
|
value, any newly accepted connections will be first checked against
|
|
|
|
|
the current count of established connections and, if the configured
|
|
|
|
|
limit has been reached, then the newly accepted connection will be
|
|
|
|
|
closed immediately.
|
|
|
|
|
|
|
|
|
|
hotspot/runtime:
|
|
|
|
|
|
|
|
|
|
JDK-8281181: CPU Shares Ignored When Computing Active Processor Count
|
|
|
|
|
=====================================================================
|
|
|
|
|
Previous JDK releases used an incorrect interpretation of the Linux
|
|
|
|
|
cgroups parameter "cpu.shares". This might cause the JVM to use fewer
|
|
|
|
|
CPUs than available, leading to an under utilization of CPU resources
|
|
|
|
|
when the JVM is used inside a container.
|
|
|
|
|
|
|
|
|
|
Starting from this JDK release, by default, the JVM no longer
|
|
|
|
|
considers "cpu.shares" when deciding the number of threads to be used
|
|
|
|
|
by the various thread pools. The `-XX:+UseContainerCpuShares`
|
|
|
|
|
command-line option can be used to revert to the previous
|
|
|
|
|
behavior. This option is deprecated and may be removed in a future JDK
|
|
|
|
|
release.
|
|
|
|
|
|
|
|
|
|
security-libs/java.security:
|
|
|
|
|
|
|
|
|
|
JDK-8269039: Disabled SHA-1 Signed JARs
|
|
|
|
|
=======================================
|
|
|
|
|
JARs signed with SHA-1 algorithms are now restricted by default and
|
|
|
|
|
treated as if they were unsigned. This applies to the algorithms used
|
|
|
|
|
to digest, sign, and optionally timestamp the JAR. It also applies to
|
|
|
|
|
the signature and digest algorithms of the certificates in the
|
|
|
|
|
certificate chain of the code signer and the Timestamp Authority, and
|
|
|
|
|
any CRLs or OCSP responses that are used to verify if those
|
|
|
|
|
certificates have been revoked. These restrictions also apply to
|
|
|
|
|
signed JCE providers.
|
|
|
|
|
|
|
|
|
|
To reduce the compatibility risk for JARs that have been previously
|
|
|
|
|
timestamped, there is one exception to this policy:
|
|
|
|
|
|
|
|
|
|
- Any JAR signed with SHA-1 algorithms and timestamped prior to
|
|
|
|
|
January 01, 2019 will not be restricted.
|
|
|
|
|
|
|
|
|
|
This exception may be removed in a future JDK release. To determine if
|
|
|
|
|
your signed JARs are affected by this change, run:
|
|
|
|
|
|
|
|
|
|
$ jarsigner -verify -verbose -certs`
|
|
|
|
|
|
|
|
|
|
on the signed JAR, and look for instances of "SHA1" or "SHA-1" and
|
|
|
|
|
"disabled" and a warning that the JAR will be treated as unsigned in
|
|
|
|
|
the output.
|
|
|
|
|
|
|
|
|
|
For example:
|
|
|
|
|
|
|
|
|
|
Signed by "CN="Signer""
|
|
|
|
|
Digest algorithm: SHA-1 (disabled)
|
|
|
|
|
Signature algorithm: SHA1withRSA (disabled), 2048-bit key
|
|
|
|
|
|
|
|
|
|
WARNING: The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled by the security property:
|
|
|
|
|
|
|
|
|
|
jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, DSA keySize < 1024, SHA1 denyAfter 2019-01-01
|
|
|
|
|
|
|
|
|
|
JARs affected by these new restrictions should be replaced or
|
|
|
|
|
re-signed with stronger algorithms.
|
|
|
|
|
|
|
|
|
|
Users can, *at their own risk*, remove these restrictions by modifying
|
|
|
|
|
the `java.security` configuration file (or override it by using the
|
|
|
|
|
`java.security.properties` system property) and removing "SHA1 usage
|
|
|
|
|
SignedJAR & denyAfter 2019-01-01" from the
|
|
|
|
|
`jdk.certpath.disabledAlgorithms` security property and "SHA1
|
|
|
|
|
denyAfter 2019-01-01" from the `jdk.jar.disabledAlgorithms` security
|
|
|
|
|
property.
|
|
|
|
|
|
|
|
|
|
JDK-8267880: Upgrade the default PKCS12 MAC algorithm
|
|
|
|
|
=====================================================
|
|
|
|
|
|
|
|
|
|
The default MAC algorithm used in a PKCS #12 keystore has been
|
|
|
|
|
updated. The new algorithm is based on SHA-256 and is stronger than
|
|
|
|
|
the old one based on SHA-1. See the security properties starting with
|
|
|
|
|
`keystore.pkcs12` in the `java.security` file for detailed
|
|
|
|
|
information.
|
|
|
|
|
|
|
|
|
|
The new SHA-256 based MAC algorithms were introduced in the 11.0.12
|
|
|
|
|
release. Keystores created using this newer, stronger, MAC algorithm
|
|
|
|
|
cannot be opened in versions of OpenJDK 11 earlier than 11.0.12. A
|
|
|
|
|
'java.security.NoSuchAlgorithmException' exception will be thrown in
|
|
|
|
|
such circumstances.
|
|
|
|
|
|
|
|
|
|
For compatibility, use the `keystore.pkcs12.legacy` system property,
|
|
|
|
|
which will revert the algorithms to use the older, weaker
|
|
|
|
|
algorithms. There is no value defined for this property.
|
|
|
|
|
|
|
|
|
|
core-libs/java.io:serialization:
|
|
|
|
|
|
|
|
|
|
JDK-8261160: JDK Flight Recorder Event for Deserialization
|
|
|
|
|
==========================================================
|
|
|
|
|
It is now possible to monitor deserialization of objects using JDK
|
|
|
|
|
Flight Recorder (JFR). When JFR is enabled and the JFR configuration
|
|
|
|
|
includes deserialization events, JFR will emit an event whenever the
|
|
|
|
|
running program attempts to deserialize an object. The deserialization
|
|
|
|
|
event is named `jdk.Deserialization`, and it is disabled by
|
|
|
|
|
default. The deserialization event contains information that is used
|
|
|
|
|
by the serialization filter mechanism; see the ObjectInputFilter API
|
|
|
|
|
specification for details.
|
|
|
|
|
|
|
|
|
|
Additionally, if a filter is enabled, the JFR event indicates whether
|
|
|
|
|
the filter accepted or rejected deserialization of the object. For
|
|
|
|
|
further information about how to use the JFR deserialization event,
|
|
|
|
|
see the article "Monitoring Deserialization to Improve Application
|
|
|
|
|
Security"
|
|
|
|
|
(https://inside.java/2021/03/02/monitoring-deserialization-activity-in-the-jdk/).
|
|
|
|
|
|
|
|
|
|
For reference information about using and configuring JFR, see the
|
|
|
|
|
"JFR Runtime Guide"
|
|
|
|
|
(https://docs.oracle.com/javacomponents/jmc-5-5/jfr-runtime-guide/preface_jfrrt.htm#JFRRT165)
|
|
|
|
|
and "JFR Command Reference"
|
|
|
|
|
(https://docs.oracle.com/javacomponents/jmc-5-5/jfr-command-reference/command-line-options.htm#JFRCR-GUID-FE61CA60-E1DF-460E-A8E0-F4FF5D58A7A0)
|
|
|
|
|
sections of the JDK Mission Control documentation.
|
|
|
|
|
|
|
|
|
|
security-libs/org.ietf.jgss:krb5:
|
|
|
|
|
|
|
|
|
|
JDK-8139348: Deprecate 3DES and RC4 in Kerberos
|
|
|
|
|
===============================================
|
|
|
|
|
The `des3-hmac-sha1` and `rc4-hmac` Kerberos encryption types (etypes)
|
|
|
|
|
are now deprecated and disabled by default. Users can set
|
|
|
|
|
`allow_weak_crypto = true` in the `krb5.conf` configuration file to
|
|
|
|
|
re-enable them (along with other weak etypes including `des-cbc-crc`
|
|
|
|
|
and `des-cbc-md5`) at their own risk. To disable a subset of the weak
|
|
|
|
|
etypes, users can list preferred etypes explicitly in any of the
|
|
|
|
|
`default_tkt_enctypes`, `default_tgs_enctypes`, or
|
|
|
|
|
`permitted_enctypes` settings.
|
|
|
|
|
|
|
|
|
|
New in release OpenJDK 11.0.16.1 (2022-08-12):
|
|
|
|
|
=============================================
|
|
|
|
|
Live versions of these release notes can be found at:
|
|
|
|
|
* https://bit.ly/openjdk110161
|
|
|
|
|
* https://builds.shipilev.net/backports-monitor/release-notes-11.0.16.1.txt
|
|
|
|
|
|
|
|
|
|
* Other changes
|
|
|
|
|
- JDK-8292255: Bump update version for OpenJDK: jdk-11.0.16.1
|
|
|
|
|
- JDK-8292260: [BACKOUT] JDK-8279219: [REDO] C2 crash when allocating array of size too large
|
|
|
|
|
|
|
|
|
|
Notes on individual issues:
|
|
|
|
|
===========================
|
|
|
|
|
|
|
|
|
|
hotspot/compiler:
|
|
|
|
|
|
|
|
|
|
JDK-8292396: C2 Compilation Errors Unpredictably Crashes JVM
|
|
|
|
|
============================================================
|
|
|
|
|
Fixes a regression in the C2 JIT compiler which caused the Java
|
|
|
|
|
Runtime to crash unpredictably.
|
|
|
|
|
|
|
|
|
|
New in release OpenJDK 11.0.16 (2022-07-19):
|
|
|
|
|
=============================================
|
|
|
|
|
Live versions of these release notes can be found at:
|
|
|
|
|
|
CentOS Sources
Stepan Oksanichenko