|
 |
d1af5a |
Key:
|
|
|
d1af5a |
|
|
|
d1af5a |
JDK-X - https://bugs.openjdk.java.net/browse/JDK-X
|
|
|
d1af5a |
CVE-XXXX-YYYY: https://cve.mitre.org/cgi-bin/cvename.cgi?name=XXXX-YYYY
|
|
|
d1af5a |
|
|
|
0e75f3 |
New in release OpenJDK 15.0.2 (2021-01-19):
|
|
|
d1af5a |
===========================================
|
|
|
0e75f3 |
Live versions of these release notes can be found at:
|
|
|
0e75f3 |
* https://builds.shipilev.net/backports-monitor/release-notes-15.0.2.txt
|
|
|
0e75f3 |
|
|
|
0e75f3 |
* Security fixes
|
|
|
0e75f3 |
- JDK-8247619: Improve Direct Buffering of Characters
|
|
|
0e75f3 |
* Other changes
|
|
|
0e75f3 |
- JDK-8197981: Missing return statement in __sync_val_compare_and_swap_8
|
|
|
0e75f3 |
- JDK-8239105: Add exception for expiring Digicert root certificates to VerifyCACerts test
|
|
|
0e75f3 |
- JDK-8247741: Test test/hotspot/jtreg/runtime/7162488/TestUnrecognizedVmOption.java fails when -XX:+IgnoreUnrecognizedVMOptions is set
|
|
|
0e75f3 |
- JDK-8248411: [aarch64] Insufficient error handling when CodeBuffer is exhausted
|
|
|
0e75f3 |
- JDK-8248596: [TESTBUG] compiler/loopopts/PartialPeelingUnswitch.java times out with Graal enabled
|
|
|
0e75f3 |
- JDK-8248667: Need support for building native libraries located in the test/lib directory
|
|
|
0e75f3 |
- JDK-8249176: Update GlobalSignR6CA test certificates
|
|
|
0e75f3 |
- JDK-8249192: MonitorInfo stores raw oops across safepoints
|
|
|
0e75f3 |
- JDK-8249217: Unexpected StackOverflowError in "process reaper" thread still happens
|
|
|
0e75f3 |
- JDK-8249781: AArch64: AOT compiled code crashes if C2 allocates r27
|
|
|
0e75f3 |
- JDK-8250257: Bump release strings for JDK 15.0.2
|
|
|
0e75f3 |
- JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
|
|
|
0e75f3 |
- JDK-8251859: sun/security/validator/PKIXValAndRevCheckTests.java fails
|
|
|
0e75f3 |
- JDK-8253191: C2: Masked byte comparisons with large masks produce wrong result on x86
|
|
|
0e75f3 |
- JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
|
|
|
0e75f3 |
- JDK-8253566: clazz.isAssignableFrom will return false for interface implementors
|
|
|
0e75f3 |
- JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
|
|
|
0e75f3 |
- JDK-8253791: Issue with useAppleColor check in CSystemColors.m
|
|
|
0e75f3 |
- JDK-8253960: Memory leak in Java_java_lang_ClassLoader_defineClass0()
|
|
|
0e75f3 |
- JDK-8254081: java/security/cert/PolicyNode/GetPolicyQualifiers.java fails due to an expired certificate
|
|
|
0e75f3 |
- JDK-8254166: Zero: return-type warning in zeroInterpreter_zero.cpp
|
|
|
0e75f3 |
- JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
|
|
|
0e75f3 |
- JDK-8254319: Shenandoah: Interpreter native-LRB needs to activate during HAS_FORWARDED
|
|
|
0e75f3 |
- JDK-8254320: Shenandoah: C2 native LRB should activate for non-cset objects
|
|
|
0e75f3 |
- JDK-8254790: SIGSEGV in string_indexof_char and stringL_indexof_char intrinsics
|
|
|
0e75f3 |
- JDK-8254854: [cgroups v1] Metric limits not properly detected on some join controller combinations
|
|
|
0e75f3 |
- JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
|
|
|
0e75f3 |
- JDK-8255065: Zero: accessor_entry misses the IRIW case
|
|
|
0e75f3 |
- JDK-8255067: Restore Copyright line in file modified by 8253191
|
|
|
0e75f3 |
- JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
|
|
|
0e75f3 |
- JDK-8255599: Change jdk 15.0.2 milestone to fcs for build b04
|
|
|
0e75f3 |
- JDK-8255603: Memory/Performance regression after JDK-8210985
|
|
|
0e75f3 |
- JDK-8256051: nmethod_entry_barrier stub miscalculates xmm spill size on x86_32
|
|
|
0e75f3 |
- JDK-8256427: Test com/sun/jndi/dns/ConfigTests/PortUnreachable.java does not work on AIX
|
|
|
0e75f3 |
- JDK-8256618: Zero: Linux x86_32 build still fails
|
|
|
0e75f3 |
- JDK-8257181: s390x builds are very noisy with gc-sections messages
|
|
|
0e75f3 |
- JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint() from control thread should return false
|
|
|
0e75f3 |
- JDK-8257701: Shenandoah: objArrayKlass metadata is not marked with chunked arrays
|
|
|
0e75f3 |
|
|
|
0e75f3 |
Notes on individual issues:
|
|
|
d1af5a |
===========================
|
|
|
d1af5a |
|
|
|
0e75f3 |
core-libs/java.time:
|
|
|
d1af5a |
|
|
|
0e75f3 |
JDK-8254177: US/Pacific-New Zone name removed as part of tzdata2020b
|
|
|
0e75f3 |
====================================================================
|
|
|
0e75f3 |
Following JDK's update to tzdata2020b, the long-obsolete files
|
|
|
0e75f3 |
pacificnew and systemv have been removed. As a result, the
|
|
|
0e75f3 |
"US/Pacific-New" zone name declared in the pacificnew data file is no
|
|
|
0e75f3 |
longer available for use.
|
|
|
d1af5a |
|
|
|
0e75f3 |
Information regarding the update can be viewed at
|
|
|
0e75f3 |
https://mm.icann.org/pipermail/tz-announce/2020-October/000059.html
|
|
|
d1af5a |
|
|
|
0e75f3 |
New in release OpenJDK 15.0.1 (2020-10-20):
|
|
|
0e75f3 |
===========================================
|
|
|
0e75f3 |
Live versions of these release notes can be found at:
|
|
|
0e75f3 |
* https://builds.shipilev.net/backports-monitor/release-notes-15.0.1.txt
|
|
|
0e75f3 |
|
|
|
0e75f3 |
* Security fixes
|
|
|
0e75f3 |
- JDK-8233624: Enhance JNI linkage
|
|
|
0e75f3 |
- JDK-8236196: Improve string pooling
|
|
|
0e75f3 |
- JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
|
|
|
0e75f3 |
- JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
|
|
|
0e75f3 |
- JDK-8237995, CVE-2020-14782: Enhance certificate processing
|
|
|
0e75f3 |
- JDK-8240124: Better VM Interning
|
|
|
0e75f3 |
- JDK-8241114, CVE-2020-14792: Better range handling
|
|
|
0e75f3 |
- JDK-8242680, CVE-2020-14796: Improved URI Support
|
|
|
0e75f3 |
- JDK-8242685, CVE-2020-14797: Better Path Validation
|
|
|
0e75f3 |
- JDK-8242695, CVE-2020-14798: Enhanced buffer support
|
|
|
0e75f3 |
- JDK-8243302: Advanced class supports
|
|
|
0e75f3 |
- JDK-8244136, CVE-2020-14803: Improved Buffer supports
|
|
|
0e75f3 |
- JDK-8244479: Further constrain certificates
|
|
|
0e75f3 |
- JDK-8244955: Additional Fix for JDK-8240124
|
|
|
0e75f3 |
- JDK-8245407: Enhance zoning of times
|
|
|
0e75f3 |
- JDK-8245412: Better class definitions
|
|
|
0e75f3 |
- JDK-8245417: Improve certificate chain handling
|
|
|
0e75f3 |
- JDK-8248574: Improve jpeg processing
|
|
|
0e75f3 |
- JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
|
|
|
0e75f3 |
- JDK-8253019: Enhanced JPEG decoding
|
|
|
0e75f3 |
* Other changes
|
|
|
0e75f3 |
- JDK-8232114: JVM crashed at imjpapi.dll in native code
|
|
|
0e75f3 |
- JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
|
|
|
0e75f3 |
- JDK-8247251: Assert '(_pcs_length == 0 || last_pc()->pc_offset() < pc_offset) failed: must specify a new, larger pc offset' failure
|
|
|
0e75f3 |
- JDK-8248495: [macos] zerovm is broken due to libffi headers location
|
|
|
0e75f3 |
- JDK-8248745: Add jarsigner and keytool tests for restricted algorithms
|
|
|
0e75f3 |
- JDK-8249165: Remove unneeded nops introduced by 8234160 changes
|
|
|
0e75f3 |
- JDK-8249183: JVM crash in "AwtFrame::WmSize" method
|
|
|
0e75f3 |
- JDK-8249266: Bump release strings for JDK 15.0.1
|
|
|
0e75f3 |
- JDK-8249266: Change jdk 15.0.1 milestone to fcs for build b02
|
|
|
0e75f3 |
- JDK-8250612: jvmciCompilerToVM.cpp declares jio_printf with "void" return type, should be "int"
|
|
|
0e75f3 |
- JDK-8250665: Wrong translation for the month name of May in ar_JO,LB,SY
|
|
|
0e75f3 |
- JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
|
|
|
0e75f3 |
- JDK-8250876: Fix issues with cross-compile on macos
|
|
|
0e75f3 |
- JDK-8250928: JFR: Improve hash algorithm for stack traces
|
|
|
0e75f3 |
- JDK-8251359: Shenandoah: filter null oops before calling enqueue/SATB barrier
|
|
|
0e75f3 |
- JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt >= 0) failed"
|
|
|
0e75f3 |
- JDK-8251859: sun/security/validator/PKIXValAndRevCheckTests.java fails
|
|
|
0e75f3 |
- JDK-8251910: Shenandoah: Handshake threads between weak-roots and reset phases
|
|
|
0e75f3 |
- JDK-8252120: compiler/oracle/TestCompileCommand.java misspells "occured"
|
|
|
0e75f3 |
- JDK-8252292: 8240795 may cause anti-dependence to be missed
|
|
|
0e75f3 |
- JDK-8252359: HotSpot Not Identifying it is Running in a Container
|
|
|
0e75f3 |
- JDK-8252367: Undo JDK-8245000: Windows GDI functions don't support large pages
|
|
|
0e75f3 |
- JDK-8252368: Undo JDK-8245002: Windows GDI functions don't support NUMA interleaving
|
|
|
0e75f3 |
- JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/DisposeFrameOnDragTest.java fails on Windows
|
|
|
0e75f3 |
- JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize option
|
|
|
0e75f3 |
- JDK-8252754: Hash code calculation of JfrStackTrace is inconsistent
|
|
|
0e75f3 |
- JDK-8253222: Shenandoah: unused AlwaysTrueClosure after JDK-8246591
|
|
|
0e75f3 |
- JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor calls virtual num_queues()
|
|
|
0e75f3 |
- JDK-8253226: Shenandoah: remove unimplemented ShenandoahStrDedupQueue::verify
|
|
|
0e75f3 |
- JDK-8253284: Zero OrderAccess barrier mappings are incorrect
|
|
|
0e75f3 |
- JDK-8253714: [cgroups v2] Soft memory limit incorrectly using memory.high
|
|
|
0e75f3 |
- JDK-8253727: [cgroups v2] Memory and swap limits reported incorrectly
|
|
|
0e75f3 |
- JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint should not access VMThread state from other threads
|
|
|
0e75f3 |
- JDK-8254144: Non-x86 Zero builds fail with return-type warning in os_linux_zero.cpp
|
|
|
0e75f3 |
- JDK-8254560: Shenandoah: Concurrent Strong Roots logging is incorrect
|
|
|
0e75f3 |
|
|
|
0e75f3 |
Notes on individual issues:
|
|
|
d1af5a |
===========================
|
|
|
d1af5a |
|
|
|
0e75f3 |
security-libs/java.security:
|
|
|
d1af5a |
|
|
|
0e75f3 |
JDK-8250756: Added Entrust Root Certification Authority - G4 certificate
|
|
|
0e75f3 |
========================================================================
|
|
|
0e75f3 |
The Entrust root certificate has been added to the cacerts truststore:
|
|
|
d1af5a |
|
|
|
0e75f3 |
Alias Name: entrustrootcag4
|
|
|
0e75f3 |
Distinguished Name: CN=Entrust Root Certification Authority - G4, OU="(c) 2015 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US
|
|
|
d1af5a |
|
|
|
0e75f3 |
JDK-8250860: Added 3 SSL Corporation Root CA Certificates
|
|
|
d1af5a |
=========================================================
|
|
|
0e75f3 |
The following root certificates have been added to the cacerts truststore for the SSL Corporation:
|
|
|
d1af5a |
|
|
|
0e75f3 |
Alias Name: sslrootrsaca
|
|
|
0e75f3 |
Distinguished Name: CN=SSL.com Root Certification Authority RSA, O=SSL Corporation, L=Houston, ST=Texas, C=US
|
|
|
d1af5a |
|
|
|
0e75f3 |
Alias Name: sslrootevrsaca
|
|
|
0e75f3 |
Distinguished Name: CN=SSL.com EV Root Certification Authority RSA R2, O=SSL Corporation, L=Houston, ST=Texas, C=US
|
|
|
d1af5a |
|
|
|
0e75f3 |
Alias Name: sslrooteccca
|
|
|
0e75f3 |
Distinguished Name: CN=SSL.com Root Certification Authority ECC, O=SSL Corporation, L=Houston, ST=Texas, C=US
|