[ubuntu/focal-proposed] openjdk-8 8u252-b09-1 (Accepted)

Matthias Klose doko at ubuntu.com
Wed Apr 15 14:02:35 UTC 2020


openjdk-8 (8u252-b09-1) unstable; urgency=medium

  * Update to OpenJDK 8u252-b09 (GA). Updated aarch32 to 8u252-b08 (no
    hotspot changes between b08 and b09).
  * Security fixes
    - JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    - JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    - JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    - JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    - JDK-8225603: Enhancement for big integers
    - JDK-8227542: Manifest improved jar headers
    - JDK-8231415, CVE-2020-2773: Better signatures in XML
    - JDK-8233250: Better X11 rendering
    - JDK-8233410: Better Build Scripting
    - JDK-8234027: Better JCEKS key support
    - JDK-8234408, CVE-2020-2781: Improve TLS session handling
    - JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    - JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    - JDK-8235274, CVE-2020-2805: Enhance typing of methods
    - JDK-8236201, CVE-2020-2830: Better Scanner conversions
    - JDK-8238960: linux-i586 builds are inconsistent as the newly build
      jdk is not able to reserve enough space for object heap
  * Other changes
    - JDK-8005819: Support cross-realm MSSFU
    - JDK-8022263: use same Clang warnings on BSD as on Linux
    - JDK-8038631: Create wrapper for awt.Robot with additional functionality
    - JDK-8047212: runtime/ParallelClassLoading/bootstrap/random/inner-complex
      assert(ObjectSynchronizer::verify_objmon_isinpool(inf)) failed: monitor
      is invalid
    - JDK-8055283: Expand ResourceHashtable with C_HEAP allocation, removal and
      some unit tests
    - JDK-8068184: Fix for JDK-8032832 caused a deadlock
    - JDK-8079693: Add support for ECDSA P-384 and P-521 curves to XML Signature
    - JDK-8132130: some docs cleanup
    - JDK-8135318: CMS wrong max_eden_size for check_gc_overhead_limit
    - JDK-8144445: Maximum size checking in Marlin ArrayCache utility methods
      is not optimal
    - JDK-8144446: Automate the Marlin crash test
    - JDK-8144526: Remove Marlin logging use of deleted internal API
    - JDK-8144630: Use PrivilegedAction to create Thread in Marlin RendererStats
    - JDK-8144654: Improve Marlin logging
    - JDK-8144718: Pisces / Marlin Strokers may generate invalid curves with
      huge coordinates and round joins
    - JDK-8166976: TestCipherPBECons has wrong @run line
    - JDK-8167409: Invalid value passed to critical JNI function
    - JDK-8181872: C1: possible overflow when strength reducing integer multiply
       by constant
    - JDK-8187078: -XX:+VerifyOops finds numerous problems when running JPRT
    - JDK-8191227: issues with unsafe handle resolution
    - JDK-8197441: Signature#initSign/initVerify for an invalid
      private/public key fails with ClassCastException for SunPKCS11 provider
    - JDK-8204152: SignedObject throws NullPointerException for null keys with
      an initialized Signature object
    - JDK-8215756: Memory leaks in the AWT on macOS
    - JDK-8216472: (se) Stack overflow during selection operation leads to crash
    - JDK-8219244: NMT: Change ThreadSafepointState's allocation type from
      mtInternal to mtThread
    - JDK-8219597: (bf) Heap buffer state changes could provoke unexpected
      exceptions
    - JDK-8225128: Add exception for expiring DocuSign root to VerifyCACerts
      test
    - JDK-8225130: Add exception for expiring Comodo roots to VerifyCACerts test
    - JDK-8229022: BufferedReader performance can be improved by using
      StringBuilder
    - JDK-8229345: Memory leak due to vtable stubs not being shared on SPARC
    - JDK-8229872: (fs) Increase buffer size used with getmntent
    - JDK-8230235: Rendering HTML with empty img attribute and documentBaseKey
      cause Exception
    - JDK-8231430: C2: Memory stomp in max_array_length() for T_ILLEGAL type
    - JDK-8235744: PIT:
      test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java times out in
      linux-x64
    - JDK-8235904: Infinite loop when rendering huge lines
    - JDK-8236179: C1 register allocation error with T_ADDRESS
    - JDK-8237368: Problem with NullPointerException in RMI TCPEndpoint.read
    - JDK-8240521: Revert backport of 8231584: Deadlock with
      ClassLoader.findLibrary and System.loadLibrary call
    - JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    - JDK-8241307: Marlin renderer should not be the default in 8u252
  * Build using GCC 9 in unstable. Closes: #944184.

Date: Wed, 15 Apr 2020 15:38:21 +0200
Changed-By: Matthias Klose <doko at ubuntu.com>
Maintainer: OpenJDK Team <openjdk at lists.launchpad.net>
https://launchpad.net/ubuntu/+source/openjdk-8/8u252-b09-1
-------------- next part --------------
Format: 1.8
Date: Wed, 15 Apr 2020 15:38:21 +0200
Source: openjdk-8
Architecture: source
Version: 8u252-b09-1
Distribution: focal
Urgency: medium
Maintainer: OpenJDK Team <openjdk at lists.launchpad.net>
Changed-By: Matthias Klose <doko at ubuntu.com>
Closes: 944184
Changes:
 openjdk-8 (8u252-b09-1) unstable; urgency=medium
 .
   * Update to OpenJDK 8u252-b09 (GA). Updated aarch32 to 8u252-b08 (no
     hotspot changes between b08 and b09).
   * Security fixes
     - JDK-8223898, CVE-2020-2754: Forward references to Nashorn
     - JDK-8223904, CVE-2020-2755: Improve Nashorn matching
     - JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
     - JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
     - JDK-8225603: Enhancement for big integers
     - JDK-8227542: Manifest improved jar headers
     - JDK-8231415, CVE-2020-2773: Better signatures in XML
     - JDK-8233250: Better X11 rendering
     - JDK-8233410: Better Build Scripting
     - JDK-8234027: Better JCEKS key support
     - JDK-8234408, CVE-2020-2781: Improve TLS session handling
     - JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
     - JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
     - JDK-8235274, CVE-2020-2805: Enhance typing of methods
     - JDK-8236201, CVE-2020-2830: Better Scanner conversions
     - JDK-8238960: linux-i586 builds are inconsistent as the newly build
       jdk is not able to reserve enough space for object heap
   * Other changes
     - JDK-8005819: Support cross-realm MSSFU
     - JDK-8022263: use same Clang warnings on BSD as on Linux
     - JDK-8038631: Create wrapper for awt.Robot with additional functionality
     - JDK-8047212: runtime/ParallelClassLoading/bootstrap/random/inner-complex
       assert(ObjectSynchronizer::verify_objmon_isinpool(inf)) failed: monitor
       is invalid
     - JDK-8055283: Expand ResourceHashtable with C_HEAP allocation, removal and
       some unit tests
     - JDK-8068184: Fix for JDK-8032832 caused a deadlock
     - JDK-8079693: Add support for ECDSA P-384 and P-521 curves to XML Signature
     - JDK-8132130: some docs cleanup
     - JDK-8135318: CMS wrong max_eden_size for check_gc_overhead_limit
     - JDK-8144445: Maximum size checking in Marlin ArrayCache utility methods
       is not optimal
     - JDK-8144446: Automate the Marlin crash test
     - JDK-8144526: Remove Marlin logging use of deleted internal API
     - JDK-8144630: Use PrivilegedAction to create Thread in Marlin RendererStats
     - JDK-8144654: Improve Marlin logging
     - JDK-8144718: Pisces / Marlin Strokers may generate invalid curves with
       huge coordinates and round joins
     - JDK-8166976: TestCipherPBECons has wrong @run line
     - JDK-8167409: Invalid value passed to critical JNI function
     - JDK-8181872: C1: possible overflow when strength reducing integer multiply
        by constant
     - JDK-8187078: -XX:+VerifyOops finds numerous problems when running JPRT
     - JDK-8191227: issues with unsafe handle resolution
     - JDK-8197441: Signature#initSign/initVerify for an invalid
       private/public key fails with ClassCastException for SunPKCS11 provider
     - JDK-8204152: SignedObject throws NullPointerException for null keys with
       an initialized Signature object
     - JDK-8215756: Memory leaks in the AWT on macOS
     - JDK-8216472: (se) Stack overflow during selection operation leads to crash
     - JDK-8219244: NMT: Change ThreadSafepointState's allocation type from
       mtInternal to mtThread
     - JDK-8219597: (bf) Heap buffer state changes could provoke unexpected
       exceptions
     - JDK-8225128: Add exception for expiring DocuSign root to VerifyCACerts
       test
     - JDK-8225130: Add exception for expiring Comodo roots to VerifyCACerts test
     - JDK-8229022: BufferedReader performance can be improved by using
       StringBuilder
     - JDK-8229345: Memory leak due to vtable stubs not being shared on SPARC
     - JDK-8229872: (fs) Increase buffer size used with getmntent
     - JDK-8230235: Rendering HTML with empty img attribute and documentBaseKey
       cause Exception
     - JDK-8231430: C2: Memory stomp in max_array_length() for T_ILLEGAL type
     - JDK-8235744: PIT:
       test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java times out in
       linux-x64
     - JDK-8235904: Infinite loop when rendering huge lines
     - JDK-8236179: C1 register allocation error with T_ADDRESS
     - JDK-8237368: Problem with NullPointerException in RMI TCPEndpoint.read
     - JDK-8240521: Revert backport of 8231584: Deadlock with
       ClassLoader.findLibrary and System.loadLibrary call
     - JDK-8241296: Segfault in JNIHandleBlock::oops_do()
     - JDK-8241307: Marlin renderer should not be the default in 8u252
   * Build using GCC 9 in unstable. Closes: #944184.
Checksums-Sha1:
 7f38c3847ca16433ce1c2d1bfce08d4c8e53c0bc 4675 openjdk-8_8u252-b09-1.dsc
 1fd2cd8b639f030cd0989b4463a0e78609c499b7 71682564 openjdk-8_8u252-b09.orig.tar.xz
 f2e39e00c750f6a6861c8d480d01c0da4d200721 245432 openjdk-8_8u252-b09-1.debian.tar.xz
 80a9d029793ad9f69d0970c5a66ba5e1245631bd 17016 openjdk-8_8u252-b09-1_source.buildinfo
Checksums-Sha256:
 e1a51991ad9c7fd83ec3fa1fac2178ba9d19338df4d2e0a624fa26b9bec831a3 4675 openjdk-8_8u252-b09-1.dsc
 8486946ad534d036b6b421f011fc68e76977bb66e263c085fdadb08f0ad1ad1c 71682564 openjdk-8_8u252-b09.orig.tar.xz
 a0d5471b83b7052a62d60872bf531b15199acd3040da8e42d1c3edd086040d64 245432 openjdk-8_8u252-b09-1.debian.tar.xz
 88b2ad93a31a6edb3b86f0a3e2f8e6e063f479e0b5fa70b4ed97df8a8ee10c1a 17016 openjdk-8_8u252-b09-1_source.buildinfo
Files:
 8fe3bbf963e33150430f546f9dd1b89f 4675 java optional openjdk-8_8u252-b09-1.dsc
 5a4891df705881cdcae9ac7c6e6af4ca 71682564 java optional openjdk-8_8u252-b09.orig.tar.xz
 f494bfae1434dba1931494f1c66cd619 245432 java optional openjdk-8_8u252-b09-1.debian.tar.xz
 bac51eb04bf9bd072fe9b765e3c188bf 17016 java optional openjdk-8_8u252-b09-1_source.buildinfo


More information about the Focal-changes mailing list