RELEASE NOTES FOR: 15.0.3
====================================================================================================

Notes generated: Sun Apr 11 02:07:07 CEST 2021

JIRA Query:
project = JDK AND (status in (Closed, Resolved)) AND (resolution not in ("Won't Fix", Duplicate,
"Cannot Reproduce", "Not an Issue", Withdrawn)) AND (labels not in (release-note, testbug,
openjdk-na, testbug) OR labels is EMPTY) AND (summary !~ 'testbug') AND (summary !~ 'problemlist')
AND (summary !~ 'problem list') AND (summary !~ 'release note') AND (issuetype != CSR) AND
fixVersion = 15.0.3

Acquiring pages (12 total): . done
Loading issues (12 total): . done
Resolving issues (12 total):  done
Resolving parents (12 total):  done
Resolving backports (12 total):  done

JIRA Query:
project = JDK AND issuetype = JEP AND fixVersion = 15.0.3 ORDER BY summary ASC

Acquiring pages (0 total):  done
Loading issues (0 total):  done
Resolving issues (0 total):  done
Resolving parents (0 total):  done

Filtered 0 issues carried over, 12 pushes left.

Hint: Prefix bug IDs with https://bugs.openjdk.java.net/browse/ to reach the relevant JIRA entry.

JAVA ENHANCEMENT PROPOSALS (JEP):

  None.

RELEASE NOTES, BY COMPONENT:

security-libs/java.security:

  JDK-8256902: Removed Root Certificates with 1024-bit Keys

      The following root certificates with weak 1024-bit RSA public keys have been removed from the
      `cacerts` keystore: ``` + alias name "thawtepremiumserverca [jdk]"   Distinguished Name:
      EMAILADDRESS=premium-server@thawte.com, CN=Thawte Premium Server CA, OU=Certification Services
      Division, O=Thawte Consulting cc, L=Cape Town, ST=Western Cape, C=ZA
      
      + alias name "verisignclass2g2ca [jdk]"   Distinguished Name: OU=VeriSign Trust Network,
      OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 2 Public Primary
      Certification Authority - G2, O="VeriSign, Inc.", C=US
      
      + alias name "verisignclass3ca [jdk]"   Distinguished Name: OU=Class 3 Public Primary
      Certification Authority, O="VeriSign, Inc.", C=US
      
      + alias name "verisignclass3g2ca [jdk]"   Distinguished Name: OU=VeriSign Trust Network,
      OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary
      Certification Authority - G2, O="VeriSign, Inc.", C=US
      
      + alias name "verisigntsaca [jdk]"   Distinguished Name: CN=Thawte Timestamping CA, OU=Thawte
      Certification, O=Thawte, L=Durbanville, ST=Western Cape, C=ZA
      
      ```

security-libs/javax.net.ssl:

  JDK-8256490: Disable TLS 1.0 and 1.1

      TLS 1.0 and 1.1 are versions of the TLS protocol that are no longer considered secure and have
      been superseded by more secure and modern versions (TLS 1.2 and 1.3).
      
      These versions have now been disabled by default. If you encounter issues, you can, at your
      own risk, re-enable the versions by removing "TLSv1" and/or "TLSv1.1" from the
      `jdk.tls.disabledAlgorithms` security property in the `java.security` configuration file.


ALL FIXED ISSUES, BY COMPONENT AND PRIORITY:

client-libs/2d:
  (P3) JDK-8247867: Upgrade to freetype 2.10.2
  (P3) JDK-8245400: Upgrade to LittleCMS 2.11

core-libs/java.time:
  (P3) JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  (P4) JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f

core-libs/java.util:i18n:
  (P4) JDK-8252497: Incorrect numeric currency code for ROL

hotspot/compiler:
  (P2) JDK-8261912: Code IfNode::fold_compares_helper more defensively

hotspot/runtime:
  (P2) JDK-8261310: PPC64 Zero build fails with 'VMError::controlled_crash(int)::FunctionDescriptor functionDescriptor' has incomplete type and cannot be defined

infrastructure:
  (P4) JDK-8262541: Bump update version for OpenJDK: jdk-15.0.3

infrastructure/build:
  (P3) JDK-8247676: vcruntime140_1.dll is not needed on 32-bit Windows

security-libs/java.security:
  (P3) JDK-8243559: Remove root certificates with 1024-bit keys

security-libs/javax.net.ssl:
  (P2) JDK-8202343: Disable TLS 1.0 and 1.1
  (P2) JDK-8256682: JDK-8202343 is incomplete