RELEASE NOTES FOR: 15.0.5 ==================================================================================================== Notes generated: Wed Apr 03 00:21:39 CEST 2024 Hint: Prefix bug IDs with https://bugs.openjdk.org/browse/ to reach the relevant JIRA entry. JAVA ENHANCEMENT PROPOSALS (JEP): None. RELEASE NOTES: security-libs/javax.net.ssl: JDK-8254631: Improve Encoding of TLS Application-Layer Protocol Negotiation (ALPN) Values Certain TLS ALPN values couldn't be properly read or written by the SunJSSE provider. This is due to the choice of Strings as the API interface and the undocumented internal use of the UTF-8 Character Set which converts characters larger than U+00007F (7-bit ASCII) into multi-byte arrays that may not be expected by a peer. ALPN values are now represented using the network byte representation expected by the peer, which should require no modification for standard 7-bit ASCII-based character Strings. However, SunJSSE now encodes/decodes String characters as 8-bit ISO_8859_1/LATIN-1 characters. This means applications that used characters above U+000007F that were previously encoded using UTF-8 may need to either be modified to perform the UTF-8 conversion, or set the Java security property *`jdk.tls.alpnCharset`* to "UTF-8" revert the behavior. JDK-8254631: Improve Encoding of TLS Application-Layer Protocol Negotiation (ALPN) Values Certain TLS ALPN values couldn't be properly read or written by the SunJSSE provider. This is due to the choice of Strings as the API interface and the undocumented internal use of the UTF-8 character set which converts characters larger than U+00007F (7-bit ASCII) into multi-byte arrays that may not be expected by a peer. SunJSSE now encodes/decodes String characters as 8-bit ISO_8859_1/LATIN-1 characters. This means applications that used characters above U+000007F that were previously encoded using UTF-8 may need to either be modified to perform the UTF-8 conversion, or set the Java security property *`jdk.tls.alpnCharset`* to "UTF-8" revert the behavior. See the updated guide at https://docs.oracle.com/javase/8/docs/technotes/guides/security/jsse/alpn.html for more information. ALL FIXED ISSUES, BY COMPONENT AND PRIORITY: client-libs: (P4) JDK-8273671: Backport of 8260616 misses one JNF header inclusion removal client-libs/2d: (P3) JDK-8262392: Update Mesa 3-D Headers to version 21.0.3 client-libs/java.awt: (P2) JDK-8272602: [macOS] not all KEY_PRESSED events sent when control modifier is used (P3) JDK-8270216: [macOS] Update named used for Java run loop mode client-libs/javax.accessibility: (P3) JDK-8249588: libwindowsaccessbridge issues on 64bit Windows (P3) JDK-8268775: Password is being converted to String in AccessibleJPasswordField client-libs/javax.sound: (P4) JDK-8266248: Compilation failure in PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5 client-libs/javax.swing: (P3) JDK-8258373: Update the text handling in the JPasswordField core-libs: (P4) JDK-8257620: Do not use objc_msgSend_stret to get macOS version core-libs/java.net: (P4) JDK-8254967: com.sun.net.HttpsServer spins on TLS session close core-libs/java.nio: (P2) JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after fix for JDK-8264821 core-libs/javax.naming: (P3) JDK-8258753: StartTlsResponse.close() hangs due to synchronization issues hotspot/compiler: (P2) JDK-8267652: c2 loop unrolling by 8 results in reading memory past array (P4) JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type hotspot/gc: (P2) JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails "assert(covered_region.contains(new_memregion)) failed: new region is not in covered_region" (P2) JDK-8257999: Parallel GC crash in gc/parallel/TestDynShrinkHeap.java: new region is not in covered_region (P2) JDK-8260704: ParallelGC: oldgen expansion needs release-store for _end hotspot/jvmti: (P4) JDK-8253899: Make IsClassUnloadingEnabled signature match specification hotspot/runtime: (P3) JDK-8268635: Corrupt oop in ClassLoaderData (P3) JDK-8269934: RunThese24H.java failed with EXCEPTION_ACCESS_VIOLATION in java_lang_Thread::get_thread_status hotspot/svc-agent: (P4) JDK-8261236: C2: ClhsdbJstackXcompStress test fails when StressGCM is enabled infrastructure: (P4) JDK-8269356: Bump update version for OpenJDK: jdk-15.0.5 infrastructure/build: (P4) JDK-8272700: [macos] Build failure with Xcode 13.0 after JDK-8264848 (P4) JDK-8264848: [macos] libjvm.dylib linker warning due to macOS version mismatch (P4) JDK-8261109: [macOS] Remove disabled warning for JNF in make/autoconf/flags-cflags.m4 security-libs/java.security: (P4) JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm performance security-libs/javax.net.ssl: (P3) JDK-8254631: Better support ALPN byte wire values in SunJSSE (P3) JDK-8268965: TCP Connection Reset when connecting simple socket to SSL server (P4) JDK-8211227: Inconsistent TLS protocol version in debug output (P4) JDK-8270317: Large Allocation in CipherSuite