RELEASE NOTES: JDK openjdk8u402

Notes generated: Fri May 02 01:27:18 CEST 2025

JEPs

None.

RELEASE NOTES

security-libs/org.ietf.jgss:krb5

Issue Description
JDK-8029995

accept yes/no for boolean krb5.conf settings


Besides "true" and "false", krb5.conf now also accepts "yes" and "no" for boolean-valued settings.

security-libs/java.security

Issue Description
JDK-8317374

Added ISRG Root X2 CA Certificate from Let's Encrypt


The following root certificate has been added to the cacerts truststore: ` + Let's Encrypt + letsencryptisrgx2 DN: CN=ISRG Root X2, O=Internet Security Research Group, C=US `
JDK-8312489

Increase Default Value of the System Property `jdk.jar.maxSignatureFileSize`


The system property, jdk.jar.maxSignatureFileSize, allows applications to control the maximum size of signature files in a signed JAR. Its default value has been increased from 8000000 bytes (8 MB) to 16000000 bytes (16 MB).
JDK-8318759

Added Four Root Certificates from DigiCert, Inc.


The following root certificates have been added to the cacerts truststore: ``` + DigiCert, Inc. + digicertcseccrootg5 DN: CN=DigiCert CS ECC P384 Root G5, O="DigiCert, Inc.", C=US

  • DigiCert, Inc.

  • digicertcsrsarootg5 DN: CN=DigiCert CS RSA4096 Root G5, O="DigiCert, Inc.", C=US

  • DigiCert, Inc.

  • digicerttlseccrootg5 DN: CN=DigiCert TLS ECC P384 Root G5, O="DigiCert, Inc.", C=US

  • DigiCert, Inc.

  • digicerttlsrsarootg5 DN: CN=DigiCert TLS RSA4096 Root G5, O="DigiCert, Inc.", C=US ```
JDK-8317373

Added Telia Root CA v2 Certificate


The following root certificate has been added to the cacerts truststore: ` + Telia Root CA v2 + teliarootcav2 DN: CN=Telia Root CA v2, O=Telia Finland Oyj, C=FI `
JDK-8319187

Added Three Root Certificates from eMudhra Technologies Limited


The following root certificates have been added to the cacerts truststore: ``` + eMudhra Technologies Limited + emsignrootcag1 DN: CN=emSign Root CA - G1, O=eMudhra Technologies Limited, OU=emSign PKI, C=IN

  • eMudhra Technologies Limited

  • emsigneccrootcag3 DN: CN=emSign ECC Root CA - G3, O=eMudhra Technologies Limited, OU=emSign PKI, C=IN

  • eMudhra Technologies Limited

  • emsignrootcag2 DN: CN=emSign Root CA - G2, O=eMudhra Technologies Limited, OU=emSign PKI, C=IN ```

FIXED ISSUES

client-libs/2d

Priority Bug Summary
P4 JDK-6528710 sRGB-ColorSpace to sRGB-ColorSpace Conversion

client-libs/java.awt

Priority Bug Summary
P3 JDK-8212677 X11 default visual support for IM status window on VNC

client-libs/javax.sound

Priority Bug Summary
P3 JDK-8312535 MidiSystem.getSoundbank() throws unexpected SecurityException

core-libs

Priority Bug Summary
P4 JDK-8315506 C99 compatibility issue in LinuxNativeDispatcher

core-libs/java.lang

Priority Bug Summary
P4 JDK-8239365 ProcessBuilder test modifications for AIX execution

core-libs/java.net

Priority Bug Summary
P4 JDK-8207404 MulticastSocket tests failing on AIX

core-svc/javax.management

Priority Bug Summary
P4 JDK-8206179 com/sun/management/OperatingSystemMXBean/GetCommittedVirtualMemorySize.java fails with Committed virtual memory size illegal value

hotspot/compiler

Priority Bug Summary
P4 JDK-8311813 C1: Uninitialized PhiResolver::_loop field
P4 JDK-8317291 Missing null check for nmethod::is_native_method()

infrastructure

Priority Bug Summary
P4 JDK-8305329 [8u] Unify test libraries into single test library - step 1

infrastructure/build

Priority Bug Summary
P3 JDK-8176509 Use pandoc for converting build readme to html
P4 JDK-8307837 [8u] Check step in GHA should also print errors

infrastructure/release_eng

Priority Bug Summary
P4 JDK-8315280 Bump update version of OpenJDK: 8u402

security-libs/java.security

Priority Bug Summary
P2 JDK-8318759 Add four DigiCert root certificates
P2 JDK-8317374 Add Let's Encrypt ISRG Root X2
P2 JDK-8317373 Add Telia Root CA v2
P2 JDK-8319187 Add three eMudhra emSign roots
P2 JDK-8285696 AlgorithmConstraints:permits not throwing IllegalArgumentException when 'alg' is null
P3 JDK-8302017 Allocate BadPaddingException only if it will be thrown
P3 JDK-8312489 Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar
P3 JDK-8320597 RSA signature verification fails on signed data that does not encode params correctly
P4 JDK-8271838 AmazonCA.java interop test fails
P4 JDK-8309088 security/infra/java/security/cert/CertPathValidator/certification/AmazonCA.java fails

security-libs/jdk.security

Priority Bug Summary
P4 JDK-8285398 Cache the results of constraint checks

security-libs/org.ietf.jgss:krb5

Priority Bug Summary
P3 JDK-8029995 accept yes/no for boolean krb5.conf settings

tools/javac

Priority Bug Summary
P3 JDK-8319405 [s390] [jdk8] Increase javac default stack size for s390x zero