RELEASE NOTES FOR: openjdk8u402 ==================================================================================================== Notes generated: Mon Dec 02 00:26:53 CET 2024 Hint: Prefix bug IDs with https://bugs.openjdk.org/browse/ to reach the relevant JIRA entry. JAVA ENHANCEMENT PROPOSALS (JEP): None. RELEASE NOTES: security-libs/org.ietf.jgss:krb5: JDK-8029995: accept yes/no for boolean krb5.conf settings Besides "true" and "false", krb5.conf now also accepts "yes" and "no" for boolean-valued settings. security-libs/java.security: JDK-8317374: Added ISRG Root X2 CA Certificate from Let's Encrypt The following root certificate has been added to the cacerts truststore: ``` + Let's Encrypt + letsencryptisrgx2 DN: CN=ISRG Root X2, O=Internet Security Research Group, C=US ``` JDK-8312489: Increase Default Value of the System Property `jdk.jar.maxSignatureFileSize` The system property, `jdk.jar.maxSignatureFileSize`, allows applications to control the maximum size of signature files in a signed JAR. Its default value has been increased from 8000000 bytes (8 MB) to 16000000 bytes (16 MB). JDK-8318759: Added Four Root Certificates from DigiCert, Inc. The following root certificates have been added to the cacerts truststore: ``` + DigiCert, Inc. + digicertcseccrootg5 DN: CN=DigiCert CS ECC P384 Root G5, O="DigiCert, Inc.", C=US + DigiCert, Inc. + digicertcsrsarootg5 DN: CN=DigiCert CS RSA4096 Root G5, O="DigiCert, Inc.", C=US + DigiCert, Inc. + digicerttlseccrootg5 DN: CN=DigiCert TLS ECC P384 Root G5, O="DigiCert, Inc.", C=US + DigiCert, Inc. + digicerttlsrsarootg5 DN: CN=DigiCert TLS RSA4096 Root G5, O="DigiCert, Inc.", C=US ``` JDK-8317373: Added Telia Root CA v2 Certificate The following root certificate has been added to the cacerts truststore: ``` + Telia Root CA v2 + teliarootcav2 DN: CN=Telia Root CA v2, O=Telia Finland Oyj, C=FI ``` JDK-8319187: Added Three Root Certificates from eMudhra Technologies Limited The following root certificates have been added to the cacerts truststore: ``` + eMudhra Technologies Limited + emsignrootcag1 DN: CN=emSign Root CA - G1, O=eMudhra Technologies Limited, OU=emSign PKI, C=IN + eMudhra Technologies Limited + emsigneccrootcag3 DN: CN=emSign ECC Root CA - G3, O=eMudhra Technologies Limited, OU=emSign PKI, C=IN + eMudhra Technologies Limited + emsignrootcag2 DN: CN=emSign Root CA - G2, O=eMudhra Technologies Limited, OU=emSign PKI, C=IN ``` ALL FIXED ISSUES, BY COMPONENT AND PRIORITY: client-libs/2d: (P4) JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion client-libs/java.awt: (P3) JDK-8212677: X11 default visual support for IM status window on VNC client-libs/javax.sound: (P3) JDK-8312535: MidiSystem.getSoundbank() throws unexpected SecurityException core-libs: (P4) JDK-8315506: C99 compatibility issue in LinuxNativeDispatcher core-libs/java.lang: (P4) JDK-8239365: ProcessBuilder test modifications for AIX execution core-libs/java.net: (P4) JDK-8207404: MulticastSocket tests failing on AIX core-svc/javax.management: (P4) JDK-8206179: com/sun/management/OperatingSystemMXBean/GetCommittedVirtualMemorySize.java fails with Committed virtual memory size illegal value hotspot/compiler: (P4) JDK-8311813: C1: Uninitialized PhiResolver::_loop field (P4) JDK-8317291: Missing null check for nmethod::is_native_method() infrastructure: (P4) JDK-8305329: [8u] Unify test libraries into single test library - step 1 infrastructure/build: (P3) JDK-8176509: Use pandoc for converting build readme to html (P4) JDK-8307837: [8u] Check step in GHA should also print errors infrastructure/release_eng: (P4) JDK-8315280: Bump update version of OpenJDK: 8u402 security-libs/java.security: (P2) JDK-8318759: Add four DigiCert root certificates (P2) JDK-8317374: Add Let's Encrypt ISRG Root X2 (P2) JDK-8317373: Add Telia Root CA v2 (P2) JDK-8319187: Add three eMudhra emSign roots (P2) JDK-8285696: AlgorithmConstraints:permits not throwing IllegalArgumentException when 'alg' is null (P3) JDK-8302017: Allocate BadPaddingException only if it will be thrown (P3) JDK-8312489: Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar (P3) JDK-8320597: RSA signature verification fails on signed data that does not encode params correctly (P4) JDK-8271838: AmazonCA.java interop test fails (P4) JDK-8309088: security/infra/java/security/cert/CertPathValidator/certification/AmazonCA.java fails security-libs/jdk.security: (P4) JDK-8285398: Cache the results of constraint checks security-libs/org.ietf.jgss:krb5: (P3) JDK-8029995: accept yes/no for boolean krb5.conf settings tools/javac: (P3) JDK-8319405: [s390] [jdk8] Increase javac default stack size for s390x zero