Changelog for java-15-openjdk-headless-15.0.10.0-9.99.x86_64.rpm :

* Tue Feb 20 2024 Fridrich Strba - Use %patch -P N instead of deprecated %patchN.
* Tue Feb 21 2023 Fridrich Strba - Update to upsteam tag jdk-15.0.10+5 (January 2023 CPU)
* Likely the last release of Java 15 ever
* CVEs + CVE-2023-21835, bsc#1207246 + CVE-2023-21843, bsc#1207248
* Security fixes: + JDK-8293598: Enhance InetAddress address handling + JDK-8286070: Improve UTF8 representation + JDK-8286496: Improve Thread labels + JDK-8288516: Enhance font creation + JDK-8287411: Enhance DTLS performance + JDK-8289350: Better media supports + JDK-8293717: Objective view of ObjectView + JDK-8293554: Enhanced DH Key Exchanges + JDK-8295723: security/infra/wycheproof/RunWycheproof.java fails + JDK-8293734: Improve BMP image handling + JDK-8293742: Better Banking of Sounds + JDK-8295687: Better BMP bounds
* Other changes: + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java fails for hr_HR + JDK-8297804: (tz) Update Timezone Data to 2022g + JDK-8283323: libharfbuzz optimization level results in extreme build times + JDK-8273894: ConcurrentModificationException raised every time ReferralsCache drops referral + JDK-8297530: java.lang.IllegalArgumentException: Negative length on strings concatenation + JDK-8287076: Document.normalizeDocument() produces different results + JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java timed out + JDK-8287180: Update IANA Language Subtag Registry to Version 2022-08-08 + JDK-8267038: Update IANA Language Subtag Registry to Version 2022-03-02 + JDK-8290451: Incorrect result when switching to C2 OSR compilation from C1 + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2 + JDK-8296496: Overzealous check in sizecalc.h prevents large memory allocation + JDK-8296480: java/security/cert/pkix/policyChanges/ /TestPolicy.java is failing + JDK-8296715: CLDR v42 update for tzdata 2022f + JDK-8297027: Fix broken aarch64 build of 13u/15u after bad backport of 8293044 + JDK-8296239: ISO 4217 Amendment 174 Update + JDK-8294307: ISO 4217 Amendment 173 Update + JDK-8296108: (tz) Update Timezone Data to 2022f + JDK-8295554: Move the \"sizecalc.h\" to the correct location + JDK-8293816: CI: ciBytecodeStream::get_klass() is not consistent + JDK-8293044: C1: Missing access check on non-accessible class + JDK-8293701: jdeps InverseDepsAnalyzer runs into NoSuchElementException: No value present + JDK-8277881: Missing SessionID in TLS1.3 resumption in compatibility mode + JDK-8270344: Session resumption errors + JDK-8293672: Update freetype md file + JDK-8284690: [macos] VoiceOver : Getting java.lang.IllegalArgumentException: Invalid location on Editable JComboBox + JDK-8295530: Update Zlib Data Compression Library to Version 1.2.13 + JDK-8295429: Update harfbuzz md file + JDK-8295211: Fix autoconf 2.71 warning \"AC_CHECK_HEADERS: you should use literals\" + JDK-8292158: AES-CTR cipher state corruption with AVX-512 + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also has similar error of JDK-8253368 + JDK-8253368: TLS connection always receives close_notify exception + JDK-8295173: (tz) Update Timezone Data to 2022e + JDK-8294357: (tz) Update Timezone Data to 2022d + JDK-8283059: Uninitialized warning in check_code.c with GCC 11.2 + JDK-8266171: -Warray-bounds happens in imageioJPEG.c + JDK-8266174: -Wmisleading-indentation happens in libmlib_image sources
* Fri Feb 17 2023 Fridrich Strba - Remove the accessibility sub-package, since it was never really working and creates another problems (bsc#1206549). It can eventually be built as standalone if needed- Removed patches:
* jaw-jdk10.patch
* jaw-misc.patch
* jaw-nogtk.patch + not needed after the removal of the accessibility sub-package
* Mon Oct 24 2022 Fridrich Strba - Update to upstream tag jdk-15.0.9+5 (October 2022 CPU)
* Security fixes: + JDK-8289366, bsc#1204480, CVE-2022-39399: Improve HTTP/2 client usage + JDK-8288508: Enhance ECDSA usage + JDK-8286918, bsc#1204472, CVE-2022-21628: Better HttpServer service + JDK-8287446, bsc#1204475, CVE-2022-21624: Enhance icon presentations + JDK-8286910: Improve JNDI lookups + JDK-8286511: Improve macro allocation + JDK-8286526, bsc#1204473, CVE-2022-21619: Improve NTLM support + JDK-8286533, bsc#1204471, CVE-2022-21626: Key X509 usages + JDK-8286077, bsc#1204468, CVE-2022-21618: Wider MultiByte conversions + JDK-8286519: Better memory handling + JDK-8285662: Better permission resolution + JDK-8282252: Improve BigInteger/Decimal validation + JDK-8290334: Update FreeType to 2.12.1 + JDK-8289853: Update HarfBuzz to 4.4.1
* Other changes: + JDK-8266082: AssertionError in Annotate.fromAnnotations with - Xdoclint + JDK-8266172: -Wstringop-overflow happens in vmError.cpp + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp + JDK-8272720: Fix the implementation of loop unrolling heuristic with LoopPercentProfileLimit + JDK-8292579: (tz) Update Timezone Data to 2022c + JDK-8028265: Add legacy tz tests to OpenJDK + JDK-8269285: Crash/miscompile in CallGenerator::for_method_handle_inline after JDK-8191998 + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported at sigset() in exesigtest.c + JDK-8272472: StackGuardPages test doesn\'t build with glibc 2.34 + JDK-8276841: Add support for Visual Studio 2022 + JDK-8247818: GCC 10 warning stringop-overflow with symbol code + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x friendly + JDK-8293354: fastdebug build broken after JDK-8281866 + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node + JDK-8260632: Build failures after JDK-8253353 + JDK-8207936: TestZipFile failed with java.lang.AssertionError exception + JDK-8287162: (zipfs) Performance regression related to support for POSIX file permissions + JDK-8268361: Fix the infinite loop in next_line + JDK-8287463: JFR: Disable TestDevNull.java on Windows + JDK-8282947: JFR: Dump on shutdown live-locks in some conditions + JDK-8283441: C2: segmentation fault in ciMethodBlocks::make_block_at(int) + JDK-7131823: bug in GIFImageReader + JDK-8286594: (zipfs) Mention paths with dot elements in ZipException and cleanups + JDK-8282071: Update java.xml module-info + JDK-8261354: SIGSEGV at MethodIteratorHost + JDK-8269039: Disable SHA-1 Signed JARs + JDK-8289549: ISO 4217 Amendment 172 Update + JDK-8283277: ISO 4217 Amendment 171 Update + JDK-8290417: CDS cannot archive lamda proxy with useImplMethodHandle + JDK-8280684: JfrRecorderService failes with guarantee(num_written > 0) when no space left on device. + JDK-8287672: jtreg test com/sun/jndi/ldap/ /LdapPoolTimeoutTest.java fails intermittently in nightly run + JDK-8257569: Failure observed with JfrVirtualMemory::initialize + JDK-8264792: The NumberFormat for locale sq_XK formats price incorrectly. + JDK-8268894: forged ASTs can provoke an AIOOBE at com.sun.tools.javac.jvm.ClassWriter::writePosition + JDK-8272806: [macOS] \"Apple AWT Internal Exception\" when input method is changed + JDK-8256538: Fix annoying awk warning in configure for java versions + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member + JDK-8289486: Improve XSLT XPath operators count efficiency + JDK-8256372: [macos] Unexpected symbol was displayed on JTextField with Monospaced font + JDK-8285081: Improve XPath operators count accuracy + JDK-8282280: Update Xerces to Version 2.12.2 + JDK-8286277: CDS VerifyError when calling clone() on object array + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java fails with release VMs after JDK-8262134 + JDK-8279842: HTTPS Channel Binding support for Java GSS/Kerberos + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed with \"guarantee(false) failed: wrong number of expression stack elements during deopt\" + JDK-8279520: SPNEGO has not passed channel binding info into the underlying mechanism + JDK-8277795: LDAP connection timeout not honoured under contention + JDK-8281628: KeyAgreement : generateSecret intermittently not resetting + JDK-8259707: LDAP channel binding does not work with StartTLS extension + JDK-8245527: LDAP Channel Binding support for Java GSS/Kerberos + JDK-8286855: javac error on invalid jar should only print filename + JDK-8286444: javac errors after JDK-8251329 are not helpful enough to find root cause- Removed patch:
* openjdk-glibc234.patch + fixed by upstream in JDK-8272472
* Thu Jul 21 2022 Fridrich Strba - Update to upstream tag jdk-15.0.8+4 (July 2022 CPU)
* Security fixes: + JDK-8272243: Improve DER parsing + JDK-8272249: Better properties of loaded Properties + JDK-8277608: Address IP Addressing + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class compilation + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance MethodHandle invocations + JDK-8283190: Improve MIDI processing + JDK-8284370: Improve zlib usage + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan supports
* Other changes: + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The selected index should be \"aad\" + JDK-8193682: Infinite loop in ZipOutputStream.close() + JDK-8225122: Test AncestorResized.java fails when Windows desktop is scaled. + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a test + JDK-8250863: Build error with GCC 10 in NetworkInterface.c and k_standard.c + JDK-8252401: Introduce Utils.TEST_NATIVE_PATH + JDK-8255035: Update BCEL to Version 6.5.0 + JDK-8255266: Update Public Suffix List to 3c213aa + JDK-8257794: Zero: assert(istate->_stack_limit == istate->_thread->last_Java_sp() + 1) failed: wrong on Linux/x86_32 + JDK-8258077: Using -Xcheck:jni can lead to a double-free after JDK-8193234 + JDK-8258471: \"search codecache\" clhsdb command does not work + JDK-8258795: Update IANA Language Subtag Registry to Version 2021-05-11 + JDK-8270886: Crash in PhaseIdealLoop::verify_strip_mined_scheduling + JDK-8272574: C2: assert(false) failed: Bad graph detected in build_loop_late + JDK-8273655: content-types.properties files are missing some common types + JDK-8273682: Upgrade Jline to 3.20.0 + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE instead of returning null when view not supported + JDK-8274735: javax.imageio.IIOException: Unsupported Image Type while processing a valid JPEG image + JDK-8274751: Drag And Drop hangs on Windows + JDK-8275703: System.loadLibrary fails on Big Sur for libraries hidden from filesystem + JDK-8276657: XSLT compiler tries to define a class with empty name + JDK-8277087: ZipException: zip END header not found at ZipFile#Source.findEND + JDK-8278794: Infinite loop in DeflaterOutputStream.finish() + JDK-8278851: Correct signer logic for jars signed with multiple digest algorithms + JDK-8279505: Update documentation for RETRY_COUNT and REPEAT_COUNT + JDK-8281275: Upgrading from 8 to 11 no longer accepts \'/\' as filepath separator in gc paths + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv corrupts registers + JDK-8282538: PKCS11 tests fail on CentOS Stream 9 + JDK-8282583: Update BCEL md to include the copyright notice + JDK-8282929: Localized monetary symbols are not reflected in \'toLocalizedPattern\' return value + JDK-8283350: (tz) Update Timezone Data to 2022a + JDK-8283443: Bump update version for OpenJDK: jdk-15.0.8 + JDK-8285445: cannot open file \"NUL:\" + JDK-8285523: Improve test java/io/FileOutputStream/OpenNUL.java + JDK-8285686: Update FreeType to 2.12.0 + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with version from head + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with version from head + JDK-8287109: Distrust.java failed with CertificateExpiredException
* Wed Apr 20 2022 Fridrich Strba - Update to upstream tag jdk-15.0.7+4 (April 2022 CPU)
* Security fixes: + JDK-8284920: Incorrect Token type causes XPath expression to return empty result + JDK-8284548: Invalid XPath expression causes StringIndexOutOfBoundsException + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo + JDK-8282397: createTempFile method of java.io.File is failing when called with suffix of spaces character + JDK-8278356: Improve file creation + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath expression handling + JDK-8272588: Enhanced recording parsing + JDK-8272594: Better record of recordings + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation handler handling + JDK-8282300: Throws NamingException instead of InvalidNameException after JDK-8278972 + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports + JDK-8272261: Improve JFR recording file processing + JDK-8269938: Enhance XML processing passes redux + JDK-8272255: Completely handle MIDI files + JDK-8278805: Enhance BMP image loading + JDK-8278449: Improve keychain support + JDK-8277227: Better identification of OIDs + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object Identification + JDK-8274221: More definite BER encodings + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA signature support + JDK-8278798: Improve supported intrinsic
* Other changes: + JDK-8282761: XPathFactoryImpl remove setProperty and getProperty methods + JDK-8277488: Add expiry exception for Digicert (geotrustglobalca) expiring in May 2022 + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64 + JDK-8276141: XPathFactory set/getProperty method + JDK-8261107: ArrayIndexOutOfBoundsException in the ICC_Profile.getInstance(InputStream) + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/ /IllegalPackageAccess.java fails on platforms where no nsslib artifacts are defined + JDK-8272167: AbsPathsInImage.java should skip
*.dSYM directories + JDK-8249867: XML declaration is not followed by a newline + JDK-8274524: SSLSocket.close() hangs if it is called during the ssl handshake + JDK-8272541: Incorrect overflow test in Toom-Cook branch of BigInteger multiplication + JDK-8278309: [windows] use of uninitialized OSThread::_state + JDK-8274736: Concurrent read/close of SSLSockets causes SSLSessions to be invalidated unnecessarily + JDK-8281374: Add MD5.implCompress0 to Graal toBeInvestigated list after 8280978 + JDK-8278381: [GCC 11] Address::make_raw() does not initialize rspec + JDK-8280373: Update Xalan serializer / SystemIDResolver to align with JDK-8270492 + JDK-8253639: Change os::attempt_reserve_memory_at parameter order + JDK-8251216: Implement MD5 intrinsics on AArch64 + JDK-8251260: two MD5 tests fail \"RuntimeException: Unexpected count of intrinsic\" + JDK-8250902: Implement MD5 Intrinsics on x86 + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security for Java to 2.3.0 + JDK-8280414: Memory leak in DefaultProxySelector + JDK-8255255: Update Apache Santuario (XML Signature) to version 2.2.1 + JDK-8259535: ECDSA SignatureValue do not always have the specified length + JDK-8273341: Update Siphash to version 1.0 + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder() doesn\'t respect instance size + JDK-8272570: C2: crash in PhaseCFG::global_code_motion + JDK-8274658: ISO 4217 Amendment 170 Update + JDK-8279077: JFR crashes on Linux ppc due to missing crash protector in signal handler + JDK-8253638: Cleanup os::reserve_memory and remove MAP_FIXED + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString() throws NPE- Do not include back the JavaEE modules in the JDK- Removed patches:
* activation-module.patch
* annotation-module.patch + The pached JavaEE modules do not exist any more
* Fri Feb 04 2022 Fridrich Strba - Update to upstream tag jdk-15.0.6+5 (January 2022 CPU)
* Security fixes: + JDK-8268494: Better inlining of inlined interfaces + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification of scan methods + JDK-8269151: Better construction of EncryptedPrivateKeyInfo + JDK-8273968: JCK javax_xml tests fail in CI + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction of Identity maps + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String constructions + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser configuration management + JDK-8268488: More valuable DerValues + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of image files + JDK-8272272: Enhance jcmd communication + JDK-8272462: Enhance image handling + JDK-8273308: PatternMatchTest.java fails on CI + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array indexing + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP processing + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file handling + JDK-8271962: Better TrueType font loading + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image support + JDK-8271968: Better canonical naming + JDK-8271987: Manifest improved manifest entries + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of XML entities + JDK-8269944: Better HTTP transport redux + JDK-8268512: More content for ContentInfo + JDK-8273290: Enhance sound handling + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms for transport + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar Verification + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of URIs
* Other changes: + JDK-8226810: Failed to launch JVM because of NullPointerException occured on System.props + JDK-8256066: Tests use deprecated TestNG API that is no longer available in new versions + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if zip has dir named \".\" inside + JDK-8266545: 8261169 broke Harfbuzz build with gcc 7 and 8 + JDK-8261169: Upgrade HarfBuzz to the latest 2.8.0 + JDK-8247872: Upgrade HarfBuzz to the latest 2.7.2 + JDK-8266761: AssertionError in sun.net.httpserver.ServerImpl.responseCompleted + JDK-8268620: InfiniteLoopException test may fail on x86 platforms + JDK-8255790: GTKL&F: Java 16 crashes on initialising GTKL&F on Manjaro Linux + JDK-8272332: --with-harfbuzz=system doesn\'t add -lharfbuzz after JDK-8255790 + JDK-8248865: Document JNDI/LDAP timeout properties + JDK-8262316: Reducing locks in RSA Blinding + JDK-8273026: Slow LoginContext.login() on multi threading application + JDK-8250894: Provide a configure option to build and run against the platform libharfbuzz + JDK-8250605: Linux x86_32 builds fail after JDK-8249821 + JDK-8249821: Separate libharfbuzz from libfontmanager + JDK-8254270: linux 32 bit build doesn\'t compile libjdwp/log_messages.c + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork is deprecated + JDK-8276536: Update TimeZoneNames files to follow the changes made by JDK-8275766 + JDK-8270533: AArch64: size_fits_all_mem_uses should return false if its output is a CAS + JDK-8273826: Correct Manifest file name and NPE checks + JDK-8275766: (tz) Update Timezone Data to 2021e + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e + JDK-8266949: Check possibility to disable OperationTimedOut on Unix + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass
*) + JDK-8196100: javax/swing/text/JTextComponent/5074573/ /bug5074573.java fails + JDK-8273790: Potential cyclic dependencies between Gregorian and CalendarSystem + JDK-8253421: Initialize JFR trace-IDs with zero + JDK-8270893: IndexOutOfBoundsException while reading large TIFF file + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient incorrectly check request method when set to POST + JDK-8190753: (zipfs): Accessing a large entry (> 2^31 bytes) leads to a negative initial size for ByteArrayOutputStream + JDK-8274407: (tz) Update Timezone Data to 2021c + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b + JDK-8274468: TimeZoneTest.java fails with tzdata2021b + JDK-8274501: c2i entry barriers read int as long on AArch64 + JDK-8269850: Most JDK releases report macOS version 12 as 10.16 instead of 12.0 + JDK-8253702: BigSur version number reported as 10.16, should be 11.nn + JDK-8225083: Remove Google certificate that is expiring in December 2021 + JDK-8225082: Remove IdenTrust certificate that is expiring in September 2021 + JDK-8274840: Update OS detection code to recognize Windows 11 + JDK-8273229: Update OS detection code to recognize Windows Server 2022 + JDK-8273575: memory leak in appendBootClassPath(), paths must be deallocated + JDK-8269179: Crash in TestMacroLogicVector::testSubWordBoolean: assert(_base >= VectorMask && _base <= VectorZ) failed: Not a Vector + JDK-8274381: missing CAccessibility definitions in JNI code + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in BFSClosure::closure_impl + JDK-8266206: Build failure after JDK-8264752 with older GCCs + JDK-8264752: SIGFPE crash with option FlightRecorderOptions:threadbuffersize=30M + JDK-8273358: macOS Monterey does not have the font Times needed by Serif + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects- Modified patch:
* system-pcsclite.patch + Rediff to changed context
* Thu Oct 21 2021 Fridrich Strba - Update to upstream tag jdk-15.0.5+3 (October 2021 CPU)
* Security fixes: + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client handshaking + JDK-8268205: Enhance DTLS client handshake + JDK-8268199: Correct certificate requests + JDK-8268193: Improve requests of certificates + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session identification + JDK-8269624: Enhance method selection support + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support + JDK-8267712: Better LDAP reference processing + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained Delegation + JDK-8267086: ArrayIndexOutOfBoundsException in java.security.KeyFactory.generatePublic + JDK-8266103: Better specified spec values + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for RTF kit + JDK-8265574: Improve handling of sheets + JDK-8269763: The JEditorPane is blank after JDK-8265167 + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors + JDK-8263314: Enhance XML Dsig modes + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore integrity + JDK-8266109: More Resilient Classloading + JDK-8268506: More Manifest Digests + JDK-8266115: More Manifest Jar Loading + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing support + JDK-8270404: Better canonicalization + JDK-8270398: Enhance canonicalization + JDK-8265776: Improve Stream handling for SSL + JDK-8254967, CVE-2021-35565, bsc#1191909: com.sun.net.HttpsServer spins on TLS session close
* Other changes: + JDK-8211227: Inconsistent TLS protocol version in debug output + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3 + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails \"assert(covered_region.contains(new_memregion)) failed: new region is not in covered_region\" + JDK-8260704: ParallelGC: oldgen expansion needs release-store for _end + JDK-8257999: Parallel GC crash in gc/parallel/ /TestDynShrinkHeap.java: new region is not in covered_region + JDK-8266248: Compilation failure in PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5 + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS version mismatch 8272700: [macos] Build failure with Xcode 13.0 after JDK-8264848 + JDK-8273671: Backport of 8260616 misses one JNF header inclusion removal + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm performance + JDK-8270317: Large Allocation in CipherSuite + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when StressGCM is enabled + JDK-8270216: [macOS] Update named used for Java run loop mode + JDK-8269934: RunThese24H.java failed with EXCEPTION_ACCESS_VIOLATION in java_lang_Thread::get_thread_status + JDK-8272602: [macos] not all KEY_PRESSED events sent when control modifier is used + JDK-8254631: Better support ALPN byte wire values in SunJSSE + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type + JDK-8268775: Password is being converted to String in AccessibleJPasswordField + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after fix for JDK-8264821 + JDK-8258753: StartTlsResponse.close() hangs due to synchronization issues + JDK-8258373: Update the text handling in the JPasswordField + JDK-8257620: Do not use objc_msgSend_stret to get macOS version + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows + JDK-8253899: Make IsClassUnloadingEnabled signature match specification + JDK-8261109: [macOS] Remove disabled warning for JNF in make/autoconf/flags-cflags.m4 + JDK-8267652: c2 loop unrolling by 8 results in reading memory past array + JDK-8268965: TCP Connection Reset when connecting simple socket to SSL server + JDK-8268635: Corrupt oop in ClassLoaderData- Remove the unneeded icedtea-sound provider- Removed patches:
* icedtea-sound-1.0.1-jdk9.patch
* icedtea-sound-soundproperties.patch + not needed since the icedtea-sound provider is removed
* Thu Aug 26 2021 Fridrich Strba - Added patch:
* openjdk-glibc234.patch + fix build with glibc-2.34 (bsc#1189201)
* Thu Jul 22 2021 Fridrich Strba - Upgrade to upstream tag jdk-15.0.4+5 (July 2021 CPU)
* Security fixes + JDK-8256157: Improve bytecode assembly + JDK-8262380: Enhance XML processing passes + JDK-8264460: Improve NTLM support + JDK-8264079: Improve abstractions + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler validation + JDK-8262967: Improve Zip file support + JDK-8262477: Enhance String Conclusions + JDK-8262410: Enhanced rules for zones + JDK-8262403: Enhanced data transfers + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file validation + JDK-8260960: Signs of jarsigner signing + JDK-8260453: Improve Font Bounding + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file transfers + JDK-8256491: Better HTTP transport
* Other changes + JDK-8225081: Remove Telia Company CA certificate expiring in April 2021 + JDK-8256421: Add 2 HARICA roots to cacerts truststore + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert will expire in 90 days + JDK-8225072: Add LuxTrust certificate that is expiring in March 2021 to list of allowed but expired certs + JDK-8258630: Add expiry exception for QuoVadis root certificate + JDK-8258414: OldObjectSample events too expensive + JDK-8257621: JFR StringPool misses cached items across consecutive recordings + JDK-8255992: JFR EventWriter does not use first string from StringPool with id 0 + JDK-8253299: Manifest bytes are read twice when verifying a signed JAR + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB collectors + JDK-8252883: AccessDeniedException caused by delayed file deletion on Windows + JDK-8251456: [TESTBUG] compiler/vectorization/ /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError + JDK-8267235: [macos_aarch64] InterpreterRuntime::throw_pending_exception messing up LR results in crash + JDK-8261395: C1 crash \"cannot make java calls from the native compiler\" + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header files + JDK-8261022: Fix incorrect result of Math.abs() with char type + JDK-8262829: Native crash in Win32PrintServiceLookup.getAllPrinterNames() + JDK-8256809: Annotation processing causes NPE during flow analysis + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes target VM + JDK-8255908: ExceptionInInitializerError due to UncheckedIOException while initializing cgroupv1 subsystem + JDK-8249608: Vector register used by C2 compiled method corrupted at safepoint + JDK-8249215: JFrame::setVisible crashed with - Dfile.encoding=UTF-8 on Japanese Windows. + JDK-8257746: Regression introduced with JDK-8250984 - memory might be null in some machines + JDK-8247432: Update IANA Language Subtag Registry to Version 2020-09-29 + JDK-8250984: Memory Docker tests fail on some Linux kernels w/o cgroupv1 swap limit capabilities + JDK-8264821: DirectIOTest fails on a system with large block size + JDK-8255880: UI of Swing components is not redrawn after their internal state changed + JDK-8253476: TestUseContainerSupport.java fails on some Linux kernels w/o swap limit capabilities + JDK-8241248: NullPointerException in sun.security.ssl.HKDF.extract(HKDF.java:93) + JDK-8244500: jtreg test error in test/hotspot/ /jtreg/containers/docker/TestMemoryAwareness.java + JDK-8250627: Use -XX:+/-UseContainerSupport for enabling/disabling Java container metrics + JDK-8260349: Cannot programmatically retrieve Metaspace max set via JAVA_TOOL_OPTIONS + JDK-8244088: [Regression] Switch of Gnome theme ends up in deadlocked UI + JDK-8260380: Upgrade to LittleCMS 2.12 + JDK-8264786: [macos] All Swing/AWT apps cause Allow Notifications prompt to appear when app is launched + JDK-8255845: Memory leak in imageFile.cpp + JDK-8261170: Upgrade to FreeType 2.10.4 + JDK-8256633: Fix product build on Windows+Arm64 + JDK-8257633: Missing -mmacosx-version-min=X flag when linking libjvm + JDK-8257547: Handle multiple prereqs on the same line in deps files + JDK-8256810: Incremental rebuild broken on Macosx + JDK-8256751: Incremental rebuild with precompiled header fails when touching a header file + JDK-8248532: Every time I change keyboard language at my MacBook, Java crashes + JDK-8257242: [macOS] Java app crashes while switching input methods + JDK-8265860: Update version .jcheck/conf in jdk15u to be 15.0.4 + JDK-8264823: Update building.html document for Git in jdk15u + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks in an infinite loop OpenJDK (build 13.0.1+9) + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder.rotateDisk() + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility code on Mac OS X + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns wrong value on Fedora 32 + JDK-8261198: [macOS] Incorrect JNI parameters in number conversion in A11Y code + JDK-8259585: [macos] Bad JNI lookup error : Accessible actions do not work on macOS + JDK-8259232: Bad JNI lookup during printing + JDK-8262110: DST starts from incorrect time in 2038 + JDK-8073446: TimeZone getOffset API does not return a dst offset between years 2038-2137 + JDK-8259319: Illegal package access when SunPKCS11 requires SunJCE\'s classes + JDK-8257414: Drag n Drop target area is wrong on high DPI systems + JDK-8248552: C2 crashes with SIGFPE due to division by zero + JDK-8251549: Update docs on building for Git + JDK-8255086: Update the root locale display names + JDK-8262446: DragAndDrop hangs on Windows + JDK-8261231: Windows IME was disabled after DnD operation + JDK-8257988: Remove JNF dependency from libsaproc/MacosxDebuggerLocal.m + JDK-8260616: Removing remaining JNF dependencies in the java.desktop module + JDK-8259869: [macOS] Remove desktop module dependencies on JNF Reference APIs + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros + JDK-8259343: [macOS] Update JNI error handling in Cocoa code. + JDK-8257853: Remove dependencies on JNF\'s JNI utility functions in AWT and 2D code + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files + JDK-8257858: [macOS]: Remove JNF dependency from libosxsecurity/KeystoreImpl.m + JDK-8257860: [macOS]: Remove JNF dependency from libosxkrb5/SCDynamicStoreConfig.m + JDK-8256501: libTestMainKeyWindow fails to build with Xcode 12.2 + JDK-8257707: Fix incorrect format string in Http1HeaderParser + JDK-7146776: deadlock between URLStreamHandler.getHostAddress and file.Handler.openconnection + JDK-8261397: Try Catch Method Failing to Work When Dividing An Integer By 0
* Wed Apr 21 2021 Fridrich Strba - Upgrade to upstream tag jdk-15.0.3+3 (April 2021 CPU)
* Security fixes: + JDK-8244473: Contextualize registration for JNDI + JDK-8244543: Enhanced handling of abstract classes + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE after JDK-8244543 + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous processing + JDK-8253799: Make lists of normal filenames + JDK-8261183: Follow on to Make lists of normal filenames + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs + JDK-8258247: Couple of issues in fix for JDK-8249906 + JDK-8259428: AlgorithmId.getEncodedParams() should return copy + JDK-8257001: Improve HTTP client support
* Other changes: + JDK-8256682: JDK-8202343 is incomplete + JDK-8202343: Disable TLS 1.0 and 1.1 + JDK-8252497: Incorrect numeric currency code for ROL + JDK-8261912: Code IfNode::fold_compares_helper more defensively + JDK-8245400: Upgrade to LittleCMS 2.11 + JDK-8247867: Upgrade to freetype 2.10.2 + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f + JDK-8261310: PPC64 Zero build fails with \'VMError::controlled_crash(int)::FunctionDescriptor functionDescriptor\' has incomplete type and cannot be defined + JDK-8243559: Remove root certificates with 1024-bit keys (See CSR JDK-8262079)
* Fri Jan 22 2021 Fridrich Strba - Upgrade to upstream tag jdk-15.0.2+7 (January 2021 CPU, bsc#1181239)
* Security fixes + JDK-8247619: Improve Direct Buffering of Characters
* Other changes + JDK-8197981: Missing return statement in __sync_val_compare_and_swap_8 + JDK-8233624: Enhance JNI linkage + JDK-8236196: Improve string pooling + JDK-8236862: Enhance support of Proxy class + JDK-8239105: Add exception for expiring Digicert root certificates to VerifyCACerts test + JDK-8247741: Test test/hotspot/jtreg/runtime/7162488/ /TestUnrecognizedVmOption.java fails when - XX:+IgnoreUnrecognizedVMOptions is set + JDK-8248411: [aarch64] Insufficient error handling when CodeBuffer is exhausted + JDK-8248596: [TESTBUG] compiler/loopopts/ /PartialPeelingUnswitch.java times out with Graal enabled + JDK-8248667: Need support for building native libraries located in the test/lib directory + JDK-8248745: Add jarsigner and keytool tests for restricted algorithms + JDK-8249176: Update GlobalSignR6CA test certificates + JDK-8249192: MonitorInfo stores raw oops across safepoints + JDK-8249217: Unexpected StackOverflowError in \"process reaper\" thread still happens + JDK-8249781: AArch64: AOT compiled code crashes if C2 allocates r27 + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit + JDK-8250257: Bump release strings for JDK 15.0.2 + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN
*, bool) + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray + JDK-8251859: sun/security/validator/ /PKIXValAndRevCheckTests.java fails + JDK-8253019: Enhanced JPEG decoding + JDK-8253191: C2: Masked byte comparisons with large masks produce wrong result on x86 + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209) + JDK-8253566: clazz.isAssignableFrom will return false for interface implementors + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node
*) + JDK-8253791: Issue with useAppleColor check in CSystemColors.m + JDK-8253960: Memory leak in Java_java_lang_ClassLoader_defineClass0() + JDK-8254081: java/security/cert/PolicyNode/ /GetPolicyQualifiers.java fails due to an expired certificate + JDK-8254166: Zero: return-type warning in zeroInterpreter_zero.cpp + JDK-8254319: Shenandoah: Interpreter native-LRB needs to activate during HAS_FORWARDED + JDK-8254320: Shenandoah: C2 native LRB should activate for non-cset objects + JDK-8254790: SIGSEGV in string_indexof_char and stringL_indexof_char intrinsics + JDK-8254854: [cgroups v1] Metric limits not properly detected on some join controller combinations + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c + JDK-8255065: Zero: accessor_entry misses the IRIW case + JDK-8255067: Restore Copyright line in file modified by 8253191 + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d + JDK-8255599: Change jdk 15.0.2 milestone to fcs for build b04 + JDK-8255603: Memory/Performance regression after JDK-8210985 + JDK-8256051: nmethod_entry_barrier stub miscalculates xmm spill size on x86_32 + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/ /PortUnreachable.java does not work on AIX + JDK-8256618: Zero: Linux x86_32 build still fails + JDK-8257181: s390x builds are very noisy with gc-sections messages + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint() from control thread should return false + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked with chunked arrays- Regenerated patch: missing-return.patch