- JDK-8257707: Fix incorrect format string in Http1HeaderParser
- JDK-8257746: Regression introduced with JDK-8250984 - memory might be null in some machines
- JDK-8257798: [PPC64] undefined reference to Klass::vtable_start_offset()
- JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java as automatic test
- JDK-8257910: [JVMCI] Set exception_seen accordingly in the runtime.
- JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java again reports leaks after JDK-8257884
- JDK-8257999: Parallel GC crash in gc/parallel/TestDynShrinkHeap.java: new region is not in covered_region
- JDK-8258077: Using -Xcheck:jni can lead to a double-free after JDK-8193234
- JDK-8258247: Couple of issues in fix for JDK-8249906
- JDK-8258373: Update the text handling in the JPasswordField
- JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder.rotateDisk()
- JDK-8258419: RSA cipher buffer cleanup
- JDK-8258471: "search codecache" clhsdb command does not work
- JDK-8258534: Epsilon: clean up unused includes
- JDK-8258805: Japanese characters not entered by mouse click on Windows 10
- JDK-8258833: Cancel multi-part cipher operations in SunPKCS11 after failures
- JDK-8258836: JNI local refs exceed capacity getDiagnosticCommandInfo
- JDK-8258884: [TEST_BUG] Convert applet-based test open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java to a regular java test
- JDK-8259007: This test printed a blank page
- JDK-8259049: Uninitialized variable after JDK-8257513
- JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA to false
- JDK-8259580: Shenandoah: uninitialized label in VerifyThreadGCState
- JDK-8259231: Epsilon: improve performance under contention during virtual space expansion
- JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails "assert(covered_region.contains(new_memregion)) failed: new region is not in covered_region"
- JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert will expire in 90 days
- JDK-8259319: Illegal package access when SunPKCS11 requires SunJCE's classes
- JDK-8259339: AllocateUninitializedArray C2 intrinsic fails with void.class input
- JDK-8259428: AlgorithmId.getEncodedParams() should return copy
- JDK-8259446: runtime/jni/checked/TestCheckedReleaseArrayElements.java fails with stderr not empty
- JDK-8259949: x86 32-bit build fails when -fcf-protection is passed in the compiler flags
- JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use condition is incorrect
- JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE after JDK-8244543
- JDK-8259706: C2 compilation fails with assert(vtable_index == Method::invalid_vtable_index) failed: correct sentinel value
- JDK-8259707: LDAP channel binding does not work with StartTLS extension
- JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
- JDK-8259849: Shenandoah: Rename store-val to IU-barrier
- JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
- JDK-8260029: aarch64: fix typo in verify_oop_array
- JDK-8260308: Update LogCompilation junit to 4.13.1
- JDK-8260338: Some fields in HaltNode is not cloned
- JDK-8260349: Cannot programmatically retrieve Metaspace max set via JAVA_TOOL_OPTIONS
- JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
- JDK-8260502: [s390] NativeMovRegMem::verify() fails because it's too strict
- JDK-8260632: Build failures after JDK-8253353
- JDK-8260704: ParallelGC: oldgen expansion needs release-store for _end
- JDK-8261022: Fix incorrect result of Math.abs() with char type
- JDK-8261089: [TESTBUG] native library of test TestCheckedReleaseCriticalArray.java fails to compile with gcc 4.x
- JDK-8261183: Follow on to Make lists of normal filenames
- JDK-8261209: isStandalone property: remove dependency on pretty-print
- JDK-8261231: Windows IME was disabled after DnD operation
- JDK-8261251: Shenandoah: Use object size for full GC humongous compaction
- JDK-8261310: PPC64 Zero build fails with 'VMError::controlled_crash(int)::FunctionDescriptor functionDescriptor' has incomplete type and cannot be defined
- JDK-8261334: NMT: tuning statistic shows incorrect hash distribution
- JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
- JDK-8261522: [PPC64] AES intrinsics write beyond the destination array
- JDK-8261534: Test sun/security/pkcs11/KeyAgreement/IllegalPackageAccess.java fails on platforms where no nsslib artifacts are defined
- JDK-8261585: Restore HandleArea used in Deoptimization::uncommon_trap
- JDK-8261753: Test java/lang/System/OsVersionTest.java still failing on BigSur patch versions after JDK-8253702
- JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java in 11u
- JDK-8261912: Code IfNode::fold_compares_helper more defensively
- JDK-8261920: [AIX] jshell command throws java.io.IOError on non English locales
- JDK-8262018: Wrong format in SAP copyright header of OsVersionTest
- JDK-8263069: Exclude some failing tests from security/infra/java/security/cert/CertPathValidator
Notes on individual issues:
===========================
core-libs/javax.naming:
JDK-8258824: LDAP Channel Binding Support for Java GSS/Kerberos
A new JNDI environment property "com.sun.jndi.ldap.tls.cbtype" has
been added to enable TLS Channel Binding data in LDAP authentication
over SSL/TLS protocol to the Windows AD server. The only valid value
at present is "tls-server-end-point", where channel binding data is
created on the base of the TLS server certificate. See RFC-5929 [0]
and the module description of the `java.naming` module for further
details.
[0] RFC-5929 "Channel Bindings for TLS": https://www.ietf.org/rfc/rfc5929.txt
security-libs/java.security:
JDK-8260597: Added 2 HARICA Root CA Certificates
================================================
The following root certificates have been added to the cacerts truststore:
Alias Name: haricarootca2015
Distinguished Name: CN=Hellenic Academic and Research Institutions RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
Alias Name: haricaeccrootca2015
Distinguished Name: CN=Hellenic Academic and Research Institutions ECC RootCA 2015, O=Hellenic Academic and Research Institutions Cert. Authority, L=Athens, C=GR
security-libs/javax.net.ssl:
JDK-8256490: Disable TLS 1.0 and 1.1
====================================
TLS 1.0 and 1.1 are versions of the TLS protocol that are no longer
considered secure and have been superseded by more secure and modern
versions (TLS 1.2 and 1.3).
These versions have now been disabled by default. If you encounter
issues, you can, at your own risk, re-enable the versions by removing
"TLSv1" and/or "TLSv1.1" from the `jdk.tls.disabledAlgorithms`
security property in the `java.security` configuration file.
CentOS Sources
4 years ago
committed by
Andrew Lukoshko