RELEASE NOTES FOR: openjdk8u402
====================================================================================================

Notes generated: Tue Apr 02 04:25:47 CEST 2024

Hint: Prefix bug IDs with https://bugs.openjdk.org/browse/ to reach the relevant JIRA entry.

JAVA ENHANCEMENT PROPOSALS (JEP):

  None.

RELEASE NOTES:

security-libs/org.ietf.jgss:krb5:

    JDK-8029995: accept yes/no for boolean krb5.conf settings

      Besides "true" and "false", krb5.conf now also accepts "yes" and "no" for boolean-valued
      settings.

security-libs/java.security:

    JDK-8317374: Added ISRG Root X2 CA Certificate from Let's Encrypt

      The following root certificate has been added to the cacerts truststore: ``` + Let's Encrypt  
      + letsencryptisrgx2     DN: CN=ISRG Root X2, O=Internet Security Research Group, C=US ```

    JDK-8312489: Increase Default Value of the System Property `jdk.jar.maxSignatureFileSize`

      The system property, `jdk.jar.maxSignatureFileSize`, allows applications to control the
      maximum size of signature files in a signed JAR. Its default value has been increased from
      8000000 bytes (8 MB) to 16000000 bytes (16 MB).

    JDK-8318759: Added Four Root Certificates from DigiCert, Inc.

      The following root certificates have been added to the cacerts truststore: ``` + DigiCert,
      Inc.   + digicertcseccrootg5     DN: CN=DigiCert CS ECC P384 Root G5, O="DigiCert, Inc.", C=US
      
      + DigiCert, Inc.   + digicertcsrsarootg5     DN: CN=DigiCert CS RSA4096 Root G5, O="DigiCert,
      Inc.", C=US
      
      + DigiCert, Inc.   + digicerttlseccrootg5     DN: CN=DigiCert TLS ECC P384 Root G5,
      O="DigiCert, Inc.", C=US
      
      + DigiCert, Inc.   + digicerttlsrsarootg5     DN: CN=DigiCert TLS RSA4096 Root G5,
      O="DigiCert, Inc.", C=US ```

    JDK-8317373: Added Telia Root CA v2 Certificate

      The following root certificate has been added to the cacerts truststore: ``` + Telia Root CA
      v2   + teliarootcav2     DN: CN=Telia Root CA v2, O=Telia Finland Oyj, C=FI ```

    JDK-8319187: Added Three Root Certificates from eMudhra Technologies Limited

      The following root certificates have been added to the cacerts truststore: ``` + eMudhra
      Technologies Limited   + emsignrootcag1     DN: CN=emSign Root CA - G1, O=eMudhra Technologies
      Limited, OU=emSign PKI, C=IN
      
      + eMudhra Technologies Limited   + emsigneccrootcag3     DN: CN=emSign ECC Root CA - G3,
      O=eMudhra Technologies Limited, OU=emSign PKI, C=IN
      
      + eMudhra Technologies Limited   + emsignrootcag2     DN: CN=emSign Root CA - G2, O=eMudhra
      Technologies Limited, OU=emSign PKI, C=IN ```


ALL FIXED ISSUES, BY COMPONENT AND PRIORITY:

client-libs/2d:
  (P4) JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion

client-libs/java.awt:
  (P3) JDK-8212677: X11 default visual support for IM status window on VNC

client-libs/javax.sound:
  (P3) JDK-8312535: MidiSystem.getSoundbank() throws unexpected SecurityException

core-libs:
  (P4) JDK-8315506: C99 compatibility issue in LinuxNativeDispatcher

core-libs/java.lang:
  (P4) JDK-8239365: ProcessBuilder test modifications for AIX execution

core-libs/java.net:
  (P4) JDK-8207404: MulticastSocket tests failing on AIX

core-svc/javax.management:
  (P4) JDK-8206179: com/sun/management/OperatingSystemMXBean/GetCommittedVirtualMemorySize.java fails with Committed virtual memory size illegal value

hotspot/compiler:
  (P4) JDK-8311813: C1: Uninitialized PhiResolver::_loop field
  (P4) JDK-8317291: Missing null check for nmethod::is_native_method()

infrastructure:
  (P4) JDK-8305329: [8u] Unify test libraries into single test library - step 1

infrastructure/build:
  (P3) JDK-8176509: Use pandoc for converting build readme to html
  (P4) JDK-8307837: [8u] Check step in GHA should also print errors

infrastructure/release_eng:
  (P4) JDK-8315280: Bump update version of OpenJDK: 8u402

security-libs/java.security:
  (P2) JDK-8318759: Add four DigiCert root certificates
  (P2) JDK-8317374: Add Let's Encrypt ISRG Root X2
  (P2) JDK-8317373: Add Telia Root CA v2
  (P2) JDK-8319187: Add three eMudhra emSign roots
  (P2) JDK-8285696: AlgorithmConstraints:permits not throwing IllegalArgumentException when 'alg'  is null
  (P3) JDK-8302017: Allocate BadPaddingException only if it will be thrown
  (P3) JDK-8312489: Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar
  (P3) JDK-8320597: RSA signature verification fails on signed data that does not encode params correctly
  (P4) JDK-8271838: AmazonCA.java interop test fails
  (P4) JDK-8309088: security/infra/java/security/cert/CertPathValidator/certification/AmazonCA.java fails

security-libs/jdk.security:
  (P4) JDK-8285398: Cache the results of constraint checks

security-libs/org.ietf.jgss:krb5:
  (P3) JDK-8029995: accept yes/no for boolean krb5.conf settings

tools/javac:
  (P3) JDK-8319405: [s390] [jdk8] Increase javac default stack size for s390x zero