RELEASE NOTES FOR: openjdk8u412 ==================================================================================================== Notes generated: Wed Oct 02 01:33:51 CEST 2024 Hint: Prefix bug IDs with https://bugs.openjdk.org/browse/ to reach the relevant JIRA entry. JAVA ENHANCEMENT PROPOSALS (JEP): None. RELEASE NOTES: security-libs/org.ietf.jgss:krb5: JDK-8168518: rcache interop with krb5-1.15 The hash algorithm used in the Kerberos 5 replay cache file (rcache) is updated from MD5 to SHA256 with this change. This is also the algorithm used by MIT krb5-1.15. This change is interoperable with earlier releases of MIT krb5, which means Kerberos 5 acceptors from JDK 9 and MIT krb5-1.14 can share the same rcache file. A new system property named jdk.krb5.rcache.useMD5 is introduced. If the system property is set to "true", JDK 9 will still use the MD5 hash algorithm in rcache. This is useful when both of the following conditions are true: 1) the system has a very coarse clock and has to depend on hash values in replay attack detection, and 2) interoperability with earlier versions of JDK for rcache files is required. The default value of this system property is "false". client-libs/java.awt: JDK-8322750: AWT SystemTray API Is Not Supported on Most Linux Desktops The `java.awt.SystemTray` API is used for notifications in a desktop taskbar and may include an icon representing an application. On Linux, the Gnome desktop's own icon support in the taskbar has not worked properly for several years due to a platform bug. This, in turn, has affected the JDK's API, which relies upon that. Therefore, in accordance with the existing Java SE specification, `java.awt.SystemTray.isSupported()` will return false where ever the JDK determines the platform bug is likely to be present. The impact of this is likely to be limited since applications always must check for that support anyway. Additionally, some distros have not supported the SystemTray for several years unless the end-user chooses to install non-bundled desktop extensions. security-libs/java.security: JDK-8321408: Added Certainly R1 and E1 Root Certificates The following root certificates have been added to the cacerts truststore: ``` + Certainly + certainlyrootr1 DN: CN=Certainly Root R1, O=Certainly, C=US + Certainly + certainlyroote1 DN: CN=Certainly Root E1, O=Certainly, C=US ``` ALL FIXED ISSUES, BY COMPONENT AND PRIORITY: client-libs/2d: (P4) JDK-8192931: Regression test java/awt/font/TextLayout/CombiningPerf.java fails client-libs/java.awt: (P1) JDK-8322750: Test "api/java_awt/interactive/SystemTrayTests.html" failed because A blue ball icon is added outside of the system tray (P3) JDK-8021961: setAlwaysOnTop doesn't behave correctly in Linux/Solaris under certain scenarios (P4) JDK-8222323: ChildAlwaysOnTopTest.java fails with "RuntimeException: Failed to unset alwaysOnTop" client-libs/javax.sound: (P3) JDK-8301310: The SendRawSysexMessage test may cause a JVM crash client-libs/javax.swing: (P3) JDK-8016451: Scary messages emitted by build.tools.generatenimbus.PainterGenerator during build core-libs/java.net: (P4) JDK-8155590: Dubious collection management in sun.net.www.http.KeepAliveCache core-libs/java.time: (P3) JDK-8322725: (tz) Update Timezone Data to 2023d (P3) JDK-8325150: (tz) Update Timezone Data to 2024a core-svc/tools: (P4) JDK-8251155: HostIdentifier fails to canonicalize hostnames starting with digits (P4) JDK-8276139: TestJpsHostName.java not reliable, better to expand HostIdentifierCreate.java test docs: (P4) JDK-8251551: Use .md filename extension for README hotspot/compiler: (P2) JDK-8317507: C2 compilation fails with "Exceeded _node_regs array" (P4) JDK-8324530: Build error with gcc 10 hotspot/runtime: (P3) JDK-8079441: Intermittent failures on Windows with "Unexpected exit from test [exit code: 1080890248]" (0x406d1388) (P4) JDK-8186199: [windows] JNI_DestroyJavaVM not covered by SEH (P4) JDK-8074860: Structured Exception Catcher missing around CreateJavaVM on Windows (P4) JDK-8183503: Update hotspot tests to allow for unique test classes directory (P4) JDK-8213410: UseCompressedOops requirement check fails fails on 32-bit system hotspot/test: (P2) JDK-8208701: Fix for JDK-8208655 causes test failures in CI tier1 (P3) JDK-8208706: compiler/tiered/ConstantGettersTransitionsTest.java fails to compile (P4) JDK-8208655: use JTreg skipped status in hotspot tests infrastructure/build: (P4) JDK-8321060: [8u] hotspot needs to recognise VS2022 (P4) JDK-8323202: [8u] Remove get_source.sh and hgforest.sh (P4) JDK-8270517: Add Zero support for LoongArch (P4) JDK-8011180: Delete obsolete scripts (P4) JDK-8324184: Windows VS2010 build failed with "error C2275: 'int64_t'" infrastructure/release_eng: (P4) JDK-8320713: Bump update version of OpenJDK: 8u412 other-libs/other: (P4) JDK-8186095: upgrade to jtreg 4.2 b08 security-libs: (P3) JDK-8315757: [8u] Add cacerts JTREG tests to GHA tier1 test set (P3) JDK-8315042: NPE in PKCS7.parseOldSignedData (P4) JDK-8270280: security/infra/java/security/cert/CertPathValidator/certification/LetsEncryptCA.java OCSP response error security-libs/java.security: (P3) JDK-8321408: Add Certainly roots R1 and E1 (P3) JDK-8308592: Framework for CA interoperability testing (P3) JDK-8268678: LetsEncryptCA.java test fails as Let’s Encrypt Authority X3 is retired (P3) JDK-8224768: Test ActalisCA.java fails (P3) JDK-8288132: Update test artifacts in QuoVadis CA interop tests (P4) JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/security/cert/CertPathValidator/certification/BuypassCA.java no longer needs ocspEnabled (P4) JDK-8297955: LDAP CertStore should use LdapName and not String for DNs (P4) JDK-8312126: NullPointerException in CertStore.getCRLs after 8297955 security-libs/org.ietf.jgss:krb5: (P4) JDK-8168518: rcache interop with krb5-1.15